Week of 1 September 2025
NIST-commissioned study estimates federal IoT infrastructure investment yields a 10-20x return on investment.
Key points
- AI is noted as both a driver and beneficiary of IoT infrastructure, reinforcing the two technologies' interdependence.
- US-focused economic analysis with limited direct relevance to Australian federal AI governance or procurement decisions.
Week of 25 August 2025
MIT AI Risk Repository publishes a transparent, publicly accessible deck of 13 AI risk mitigation frameworks.
Key points
- The resource consolidates academic, industry, and policy sources into a draft AI Risk Mitigation Taxonomy for governance use.
- Useful reference for APS teams building or auditing internal AI risk frameworks, though not Australia-specific.
NIST has finalised SP 800-53 Rev. 5.2.0, adding three new security controls focused on software patching and resilience.
Key points
- The update targets software update management risk - not AI governance - limiting direct APS AI relevance.
- Limited direct relevance to Australian federal AI governance work; primarily a cybersecurity controls item.
Week of 18 August 2025
NIST awarded $1.8 million across 18 small businesses under its SBIR program for Phase I R&D projects.
Key points
- Two of the 18 awards are AI-focused: an adversarial prompt defence algorithm and an AI safety/explainability framework.
- Limited direct relevance to APS readers; included as context on US government AI R&D funding patterns.
Week of 4 August 2025
NIST and CAISI have developed two draft taxonomies for AI agent tool use, covering functionality and constrained access patterns.
Key points
- The taxonomies aim to create shared vocabulary across the AI supply chain - useful for procurement, risk assessment, and incident reporting.
- Australia has no equivalent published taxonomy for AI agent tools; NIST's work may inform future Australian guidance or procurement frameworks.
Week of 28 July 2025
MIT AI Risk Repository extracted 831 mitigations from 13 frameworks into a searchable database with a four-category taxonomy.
Key points
- The taxonomy covers Governance & Oversight, Technical & Security, Operational Process, and Transparency & Accountability controls - directly mapping to APS AI governance concerns.
- Operational Process Controls and Testing & Auditing were the most frequently cited mitigations; Model Alignment was rarely mentioned despite its importance.
Week of 14 July 2025
MIT AI Risk Repository's incident tracker has been updated to include all AIID incidents through 23 June 2025 (up to ID #1116).
Key points
- New features include national security impact assessment across five categories, harm severity rescaling, and Fishbone causal diagrams.
- Useful as a reference dataset for APS agencies developing AI risk registers or incident classification frameworks.
A 2022 academic framework proposes six AI risk categories specifically designed for public sector governance contexts.
Key points
- The taxonomy links technological, ethical, legal, social, economic, and informational risks to concrete governance guidelines.
- MIT AI Risk Repository blog spotlight - the underlying paper is three years old and the signal is retrospective rather than new.
MIT AI Risk Repository spotlights a 2020 academic framework organising AI governance challenges for public administration into three categories.
Key points
- The framework's five-layer governance structure and four-stage regulatory process offer a reference model for agency AI risk management.
- The underlying paper is five years old; APS practitioners likely have more current frameworks already in use.
Week of 16 June 2025
Alan Turing Institute researchers reflect on their role in the UK's Global AI Assurance Pilot.
Key points
- The pilot is directly relevant to Australian assurance frameworks - AISI and DTA are developing comparable approaches.
- Extracted text is minimal; full substance requires reading the source blog post directly.
Week of 12 May 2025
MIT AI Risk Repository spotlights a 2022 Google DeepMind taxonomy of LLM risks across six domains and 20 subdomains.
Key points
- The taxonomy covers discrimination, information hazards, misinformation, malicious use, HCI harms, and socioeconomic harms - directly relevant to APS AI risk assessment work.
- The underlying paper is from 2022; the MIT blog post is a summary spotlight, not new research.
Week of 21 April 2025
MIT's AI Risk Repository updated to 1,612 unique risk entries across 65 frameworks, now including multi-agent risks.
Key points
- The repository provides causal and domain taxonomies designed to support policy, auditing, and governance processes.
- A credible reference resource for APS agencies developing AI risk frameworks or audit criteria - freely accessible.
MIT AI Risk Repository spotlights the 2022 MLSR framework, categorising ML risks into first-order and second-order types.
Key points
- The framework offers a structured taxonomy integrating impact assessments, incident reports, and ML literature - useful for risk assessment design.
- This is a 2022 academic paper being surfaced via a blog digest; it is reference material rather than new guidance.
AI Now Institute report argues industry-led AI safety frameworks are weakening established military and defence evaluation standards.
Key points
- Report draws parallels with Cold War-era nuclear governance frameworks, calling for democratic oversight of military AI deployment.
- Australian federal agencies are not the primary audience; relevance is indirect, through international AI safety governance discourse.
Week of 7 April 2025
MIT AI Risk Repository maps 11 frameworks bridging traditional risk management and AI safety, all published 2023 or later.
Key points
- Frameworks span maturity models, probabilistic risk assessment, and cybersecurity adaptations useful for agency AI governance work.
- UK DSIT's 'Emerging Processes for Frontier AI Safety' is among the 11 - a directly accessible government reference.
Week of 31 March 2025
MIT AI Risk Repository Version 3 now covers over 1,600 coded AI risks drawn from 65 published frameworks.
Key points
- Nine newly added frameworks include the final International Scientific Report on the Safety of Advanced AI and multi-agent risk taxonomies.
- APS risk and governance teams can use this as a structured reference to benchmark agency AI risk frameworks against global practice.
MIT AI Risk Repository v3 now includes a public Google Slides deck covering 65 source frameworks and documents.
Key points
- The deck provides excerpts, taxonomies, and citations from academic, industry, and policy AI risk literature.
- Useful reference for APS governance professionals building or auditing AI risk taxonomies and frameworks.
Week of 3 March 2025
MIT AI Risk Repository spotlights a 2022 taxonomy classifying AI risk sources into ethical and reliability/robustness clusters.
Key points
- The framework integrates AI risk sources into formal risk assessment processes, distinguishing ML systems from classical software.
- This is a 2022 academic paper surfaced via a blog spotlight - not new guidance or a regulatory development.
NIST has finalised SP 800-226, guidelines for evaluating differential privacy guarantees in data analytics.
Key points
- Differential privacy is a privacy-enhancing technology relevant to data sharing and de-identification, including in government contexts.
- This is a US standards publication; no direct Australian regulatory parallel exists yet, limiting immediate APS applicability.
Week of 24 February 2025
MIT AI Risk Repository spotlights a 2023 framework for evaluating generative AI social impacts across eleven categories.
Key points
- Framework covers both technical system-level evaluation and broader societal impacts, with modality-specific mitigation guidance.
- Useful reference material for agencies developing AI risk or impact assessment frameworks, though not APS-specific.
Week of 13 January 2025
Sherman and Eisenberg propose a nine-category AI risk taxonomy as a pre-deployment disclosure standard.
Key points
- The framework is applied to Claude, GPT APIs, Microsoft Copilot, GitHub Copilot, and Midjourney as worked examples.
- The taxonomy aims to bridge technical and non-technical stakeholders - useful for procurement and regulatory contexts.
A 2023 peer-reviewed taxonomy classifies algorithmic harms into five categories and 20 subcategories across micro, meso, and macro levels.
Key points
- MIT AI Risk Repository spotlights this as one of its indexed risk frameworks, making it more accessible to practitioners.
- Published in 2023 and now featured in a repository blog - substantive but not a new or urgent development for APS readers.
MIT AI Risk Repository was selected among 50 projects from 770 applications to present at the 2025 Paris AI Action Summit.
Key points
- The repository compiles over 1,000 AI risks from 56 frameworks into two structured taxonomies - causal and domain-based.
- The resource is publicly accessible and already adopted by governments and researchers globally, making it potentially useful for APS risk work.
Week of 30 December 2024
MIT AI Risk Repository adds 13 new frameworks in its December 2024 update, now covering over 1,000 AI risks from 56 sources.
Key points
- Newly added frameworks include NIST AI 600-1, China's AI Safety Governance Framework, and the UK Government Office for Science frontier AI report.
- Australian contributors are among the authoring jurisdictions; the repository commits to quarterly updates through 2025.
MIT AI Risk Repository has reached 90,000+ users since August 2024, used by governments and companies globally.
Key points
- A new AI Risk Index project launching Q1 2025 will evaluate how key actors respond to high-priority AI risks.
- Planned crosswalking of the repository's taxonomies against NIST AI RMF and EU AI Act is directly useful for APS risk practitioners.