During design and build: At what point is performing an impact assessment on the system most appropriate?

An impact assessment should be performed during design and build so effects on individuals can be mitigated before finalization.

The question

Preparing for AIGP? Take the free 5-min readiness quiz →

1. Only after an incident has occurred in production, so the assessment can focus on the specific harm that has already materialized.

   Plausible but wrong: waiting for an incident defeats the preventive purpose of an impact assessment, which should precede finalization.
2. Only when a regulator formally requests one, so the organization avoids performing assessments that may not ultimately be required.

   Plausible but wrong: good governance performs impact assessments proactively for consequential systems, not solely on external demand.
3. After the system is fully deployed, so the assessment can rely on complete real-world performance data from live use.

   Plausible but wrong: a post-deployment review has value, but the assessment that shapes the design must come before finalization.
4. During design and build, so that potential effects on individuals are understood and mitigated before the system is finalized. ✓

   Correct: an impact assessment belongs in the design-and-build phase so effects can be identified and mitigated before the system is finalized.

How to remember it

An impact assessment should be performed during design and build so effects on individuals can be mitigated before finalization.

More Understanding How to Govern AI Development questions

• Red teaming that deliberately stress-tests the system: Which activity best fits this specific goal? →
• Establishing provenance by documenting the data's origin: Applying data governance, which practice most →
• Track performance against thresholds continuously: Which response best reflects that maintenance obligation? →
• All 135 Understanding How to Govern AI Development questions →