MediumDeskilling◐Demonstrated

Erosion of human skill / deskilling

Description

Long-term dependence erodes staff expertise needed when the AI fails or is unavailable.

Example scenario

When the assistant is down, staff struggle to perform tasks they used to do unaided.

Real-world evidence◐Demonstrated

Documented API outages from major providers (OpenAI, Azure OpenAI) have measurably disrupted businesses that integrated AI into workflows, demonstrating the dependency brittleness. However, a confirmed incident in which a critical BFSI operation was fully disabled by a single AI model failure has not been widely reported at scale in production.

No public incident on record — evidence level: Demonstrated

Primary mitigations

Skill-maintenance programmes
periodic manual exercises
capability redundancy.

Detection signals

Skill-assessment trends; manual-fallback drill performance.

Mitigating controls

Non-agentic controls

ZYC-OREL-001Non-Agentic

Inference with Human Oversight Rate

Over-reliance

ZYC-ETH-001Non-Agentic

Non-Maleficence

Ethical Governance

ZYC-ACCT-001Non-Agentic

Human-in-the-Loop

Accountability & Oversight

Risk scoring

Severity

Medium

score 2

Likelihood

Medium

score 2

Risk

Medium

Control depth

3 mapped (below avg 5.2)

Framework refs

3/8 taxonomies

Framework mappings

Regulatory5/5

EU AI Act: Art. 9 (Risk management system — high-risk AI providers must identify and mitigate risks arising from over-reliance and single-point-of-failure scenarios across the system lifecycle); Art. 14 (Human oversight — deployers must ensure humans can intervene and override AI outputs, which presupposes viable non-AI fallback processes); Art. 15 (Accuracy, robustness and cybersecurity — high-risk AI must remain resilient to operational failures and degradation); Annex III (high-risk designation triggers mandatory robustness and continuity requirements in relevant sectors).
DORA: Art. 5(4) and Art. 6 (ICT risk management framework — financial entities must identify and manage all ICT dependencies including AI model dependencies as ICT assets); Art. 11 (Response and recovery — ICT business continuity plans must address scenarios where a critical AI system becomes unavailable, with documented fallback procedures); Art. 12 (Backup policies and restoration procedures — data and system-state recovery obligations applicable to AI-dependent processes); Art. 17 (Major ICT-related incident reporting where AI system failure disrupts critical services); Art. 24 (Digital operational resilience testing must include scenarios covering critical AI dependency failure).
RBI: Societal Impact
NIST AI RMF: MAP 5.1
ISO/IEC 42001: Clause 6.1.1

Risk taxonomies3/4

MIT AI Risk Repository: Domain 6 – Socioeconomic
IBM AI Risk Atlas: Societal impact
NIST ARIA: Human-AI Configuration
MAESTRO: — Not mapped

Security0/4

OWASP: — Not covered by OWASP LLM 2025
MITRE ATLAS: — Not covered by MITRE ATLAS
Cisco AI Risk: — Not covered by Cisco AI Defense
Palo Alto AI Risk: — Not covered by Palo Alto Prisma AIRS

Capability‑pattern applicability

Classification

GenAI‑specific

Capability pattern

Chat

Pattern scope

Pattern-agnostic (GenAI)

Why

Generative-AI risk realised without agency/tool-use — applies to chat, RAG, summarization, classification, and content-generation deployments.

Ownership & threshold

Owner (RACI)

AI Governance Office [A]

Threshold

Programme KRI within board-approved tolerance

Inherent vs residual

Inherent

Medium

Residual

2.4

Low

Mapped controls: 3
Assumed control effectiveness: 40%

Modeled, not measured — design-stage; controls not yet tested (reduction capped 40%). Residual applies a uniform assumed reduction to the inherent score; it is not evidence of tested control performance.

Related risks in Societal & Economic

ZNR-SE-001High

Over-reliance / automation bias

ZNR-SE-002Medium

Workforce displacement

ZNR-SE-003Medium

Environmental / compute & energy cost

ZNR-SE-005Medium

Accessibility & digital-divide exclusion

Search the Atlas

Erosion of human skill / deskilling

Description

Primary mitigations

Detection signals

Mitigating controls

Related risks in Societal & Economic