Immediate Vault

RIMS TechRisk/RiskTech: Emerging Risk AI Bias

On the second day of the RIMS virtual event TechRisk/RiskTech, CornerstoneAI founder and president Chantal Sathi and advisor Eric Barberio discussed the potential uses for artificial intelligence-based technologies and how risk managers can avoid the potential inherent biases in AI.

Explaining the current state of AI and machine learning, Sathi noted that this is “emerging technology and is here to stay,” making it even more imperative to understand and account for the associated risks. The algorithms that make up these technologies feed off data sets, Sathi explained, and these data sets can contain inherent bias in how they are collected and used. While it is a misconception that all algorithms have or can produce bias, the fundamental challenge is determining whether the AI and machine learning systems that a risk manager’s company uses do contain bias.

The risks of not rooting out bias in your company’s technology include:

  • Loss of trust: If or when it is revealed that the company’s products and services are based on biased technology or data, customers and others will lose faith in the company.
  • Punitive damage: Countries around the world have implemented or are in the process of implementing regulations governing AI, attempting to ensure human control of such technologies. These regulations (such as GDPR in the European Union) can include punitive damages for violations.
  • Social harm: The widespread use of AI and machine learning includes applications in legal sentencing, medical decisions, job applications and other business functions that have major impact on people’s lives and society at large.

Sathi and Barberio outlined five steps to assess these technologies for fairness and address bias:

  1. Clearly and specifically defining the scope of what the product is supposed to do.
  2. Interpreting and pre-processing the data, which involves gathering and cleaning the data to determine if it adequately represents the full scope of ethnic backgrounds and other demographics.
  3. Most importantly, the company should employ a bias detection framework. This can include a data audit tool to determine whether any output demonstrates unjustified differential bias.
  4. Validating the results the product produces using correlation open source toolkits, such as IBM AI Fairness 360 or MS Fairlearn.
  5. Producing a final assessment report.

Following these steps, risk professionals can help ensure their companies use AI and machine learning without perpetuating its inherent bias.

The session “Emerging Risk AI Bias” and others from RIMS TechRisk/RiskTech will be available on-demand for the next 60 days, and you can access the virtual event here.

RIMS TechRisk/RiskTech: Opportunities and Risks of AI

On the first day of the RIMS virtual event TechRisk/RiskTech, author and UCLA professor Dr. Ramesh Srinivasan gave a keynote titled “The Opportunities and Downside Risks of Using AI,” touching on the key flashpoints of current technological advancement, and what they mean for risk management. He noted that as data storage has become far cheaper, and computation quicker, this has allowed risk assessment technology to improve. But with these improvements come serious risks.

Srinivasan provided an overview of where artificial intelligence and machine learning stand, and how companies use these technologies. AI is “already here,” he said, and numerous companies are using the technology, including corporate giants Uber and Airbnb, whose business models depend on AI. He also stressed that AI is not the threat portrayed in movies, and that these portrayals have led to a kind of “generalized AI anxiety,” a fear of robotic takeover or the end of humanity—not a realistic scenario.

However, the algorithms that support them and govern many users’ online activities could end up being something akin to the “pre-cogs” from Minority Report that predict future crimes because the algorithms are collecting so much personal information. Companies are using these algorithms to make decisions about users, sometimes based on data sets that are skewed to reflect the biases of the people who collected that data in the first place.

Often, technology companies will sell products with little transparency into the algorithms and data sets that the product is built around. In terms of avoiding products that use AI and machine learning that are built with implicit bias guiding those technologies, Srinivasan suggested A/B testing new products, using them on a trial or short-term basis, and using them on a small subset of users or data to see what effect they have.

When deciding which AI/machine learning technology their companies should use, Srinivasan recommended that risk professionals should specifically consider mapping out what technology their company is using and weigh the benefits against the potential risks, and also examining those risks thoroughly and what short- and long-term threats they pose to the organization.

Specific risks of AI (as companies currently use it) that risk professionals should consider include:

  • Economic risk in the form of the gig economy, which, while making business more efficient, also leaves workers with unsustainable income
  • Increased automation in the form of the internet of things, driverless vehicles, wearable tech, and other ways of replacing workers with machines, risk making labor obsolete.
  • Users do not get benefits from people and companies using and profiting off of their data.
  • New technologies also have immense environmental impact, including the amount of power that cryptocurrencies require and the health risks of electronic waste.
  • Issues like cyberwarfare, intellectual property theft and disinformation are all exacerbated as these technologies advance.
  • The bias inherent in AI/machine learning have real world impacts. For example, court sentencing often relies on biased predictive algorithms, as do policing, health care facilities (AI giving cancer treatment recommendations, for example) and business functions like hiring.

Despite these potential pitfalls, Srinivasan was optimistic, noting that risk professionals “can guide this digital world as much as it guides you,” and that “AI can serve us all.”

RIMS TechRisk/RiskTech continues today, with sessions including:

  • Emerging Risk: AI Bias
  • Connected & Protected
  • Tips for Navigating the Cyber Market
  • Taking on Rising Temps: Tools and Techniques to Manage Extreme Weather Risks for Workers
  • Using Telematics to Give a Total Risk Picture

You can register and access the virtual event here, and sessions will be available on-demand for the next 60 days.

Automating Risk Functions for Greater Value Creation

Despite recent volatility, more than 60% of risk executives surveyed in a recent PwC US Pulse Survey were optimistic about the global economy, as well as the state of the pandemic recovery. This optimism could stem from a greater alignment between risk functions and the business. Fifty percent of risk management executives reported interacting more with the C-suite, and 42% said they interact more with the board level. Nearly half of respondents said that risk functions and capabilities are now embedded in the business operations that are driving transformations.

Risk functions were once considered tactical and reactive, and often seen as a roadblock to business decisions. Infusing risk management into corporate planning allows an organization to think about compliance responsibilities in a proactive and strategic manner—moving risk and regulatory functions from a back-office cost to a competitive advantage. Staying ahead of uncertainties while also bolstering planning with data helps make companies stronger and more resilient.

Many companies spent the last decade overspending on risk management as they attempted to keep up with compliance and regulatory shifts, frequently lagging behind changes in policy. They often invested heavily in new technologies and data collection, but failed to create efficiencies by integrating those systems across largely siloed business functions. The swift onset of the pandemic made many organizations come to terms with the reality that an entire organization didn’t need to be reimagined in order to implement technological transformations, and that there was still a disconnect between many of the piecemeal systems that had been previously put in place.

Now, executives are increasingly seeing the value of risk management as a strategic advantage. It allows companies to grow in areas with less mature risk management functions, like taking on higher risk clients or entering new geographies. More intelligent monitoring also allows for increased efficiencies and reduced compliance costs.

Integrating AI and automation into the investments that have already been made can help streamline the risk management and compliance processes. Many companies still have room for improvement; only 25% of risk professionals said they were implementing new risk management technologies in 2021 and only 19% said it was a priority to integrate risk management tools onto a single platform.

By automating and enhancing risk management functions, organizations can:

  • Strategize for entering new markets. Make more informed decisions about entering a new market by taking into consideration a shifting regulatory environment and increasingly complex supply chains. Taking on high risk customers relies on analytics and transaction monitoring systems in order to identify potential suspicious activity.
  • Increase speed to respond. Automation and technology-led monitoring of policy and negative news helps position companies to respond more quickly to regulatory bodies and head off negative events before they go viral.
  • Allocate costs efficiently. No longer duplicate costs by operating the departments of your business in a siloed fashion. Leverage case management and workflow systems to aggregate control failures or suspicious activity by customer or focal entity, allowing you to evaluate the root cause and apply analysis across multiple control failures.
  • Enter new business partnerships more confidently. Know the risks of a potential business partnership and get deeper insights into the impact a business partner or vendor’s supply chain could have on your business. Vendor risk management and contract analytics technologies can monitor whether business partners are adhering to their terms and conditions.
  • Reduce the impact of new requirements.  Identify the blind spots and shed light on the potential risks within your enterprise system so you can quickly take action early in the process, allowing your organization to avoid fines when implementing new regulatory requirements.

Regulators and other stakeholders are increasingly calling for the organization of risk management functions under one cohesive point of view. By fixing the disconnects and setting a collaborative tone, you give senior executives more cohesive insights and allow them to adopt more extensive views on the organization’s risk profile.

Hurricane Laura Leaves Destruction—and Pandemic-Related Recovery Challenges

Hurricane Laura made landfall in the United States at 1 a.m. on Thursday, hitting Louisiana and Texas as a Category 4 storm with maximum sustained winds of 150 miles per hour and what National Hurricane Center officials called “unsurvivable” storm surge. In such ferocious wind, thousands of homes and businesses were damaged or completely destroyed, hundreds of thousands were left without power and, as of Thursday evening, at least four people had been killed.

While forecasters initially expected the storm to lose intensity before reaching land, it rapidly intensified this week, becoming one of only 10 hurricanes to make landfall in the continental U.S. with winds over 150 mph since modern recordkeeping began in 1851. After windspeeds nearly doubled on Wednesday, officials in Texas and Louisiana ordered several hundred thousand people in the storm’s path to evacuate, but many were either unable to leave or chose not to. Increasingly severe storms in the area in recent years may have left some feeling prepared or resigned to ride out the storm.

Others faced difficulties related to the pandemic. As Risk Management recently reported, many experts have expressed concern that the COVID-19 pandemic could significantly complicate hurricane season this year, increasing the risk to individuals and businesses and making disaster recovery more difficult. Ahead of Laura, NPR reported that emergency shelters had a hard time safely accommodating evacuees without overcrowding and had to direct many to hotels. Pandemic-related job losses may have ruled that option out for some. Mayor Nic Hunter of Lake Charles, which was particularly devastated in the storm, told NPR that he “suspects the coronavirus pandemic and economic hardship are leading many people to take pause.” The outlet also reported that experts are concerned that mass evacuations from the hurricane could lead to new outbreaks in the region.

Now, the recovery process will undoubtedly be impacted by the pandemic as well.

“The global health crisis is going to have a major impact on recovery from any major storm, including Hurricane Laura—the stress of natural disaster becomes more intense when it unfolds against the backdrop of a highly contagious viral outbreak,” John Dickson, president and CEO of flood insurance provider Aon Edge, told Risk Management in the wake of the storm on Thursday.

For example, he said, “If you think back to hurricanes like Katrina (which hit about 15 years ago almost to date) and create a mental image, you see the community banding together to respond in close physical proximity. Similar images emerged from last year’s prolonged flooding along the Missouri River. In those and other events, assembly lines formed to fill and deploy sandbags—a task impossible to do six feet apart.”

Dickson noted that technology increasingly used by insurers (also known as risktech) would be more important than ever in responding to natural disasters this year as emergency response must be balanced with safe social distancing practices.

“Smart phones and basic technology can help homeowners achieve the recommended preparation steps and stay safe during a storm,” he advised. “For example, taking pictures and videos with date and time stamps could minimize the need for on-site inspections and physical proximity to claims adjusters.”

For insurance professionals, he noted, “The insurance industry is thinking through very tactical steps to ensure policies and procedures are in place to protect those who are on the frontlines when a hurricane hits. Drone technology offers the opportunity to take photos remotely, and computer models help better quantify risk and manage work forces.”

For more insight and actionable guidance on risk management for hurricanes and other natural catastrophes, including disaster preparedness, recovery and insurance, check out the following pieces from Risk Management:

Before Disaster Strikes: How to Prepare for Natural Catastrophes
How does an organization ensure it is prepared to minimize losses and recover quickly following a natural disaster? Long before a disaster strikes and property damage occurs, the best response plans begin with careful negotiation and placement of well-defined property coverage. Read more

Key Considerations for Disaster Planning
Meticulous disaster response planning has never been more critical. When developing a plan, it is important to involve key stakeholders and review every step that your business, your network and your vendors must take if a natural catastrophe impedes operations. A strong plan should address these key questions. Read more

Weathering Hurricane Season During the Pandemic
Pandemic-related social distancing guidelines and supply shortages could make it harder for business owners to protect their properties should a storm happen, making it even more important to have an action plan in place. These key considerations can help businesses owners mitigate potential storm risks amid COVID-19. Read more

Understanding Post-Storm Business Interruption Coverage
Whether in the impacted area or beyond, businesses suffering from supply chain disruptions after hurricanes and other storms should look to their property insurance policies for contingent business interruption coverage. Read more

Natural Disaster Planning During COVID-19
As the COVID-19 pandemic continues, government authorities and disaster-response entities are over-extended and may not be able to provide assistance as readily this year. It is more important than ever that companies make backup plans and assess the potential impact of shortfalls in their disaster response protocols. Read more

The Human Element of Disaster Recovery
Crisis and disaster recovery plans offer a critical advantage when catastrophe strikes, helping mitigate the impact on facilities, information systems and equipment. Just as important, however, is considering how a disaster can affect the company’s workforce. Read more

Ensuring Insurance Recovery After a Hurricane Loss
These seven tips can help policyholders resolve disaster insurance claims in the wake of hurricanes and other natural catastrophes. Read more