All courses / AI Threat / Module 1 / Chapter 1
Learning objectives
After the lesson the participant can:
- Explain why the book treats the dystopian claim as a hypothesis to investigate and rejects both belief and dismissal.
- Classify an AI threat by scale: the human mind, society and truth, humans wielding machines, or machines beyond control.
- Distinguish capability, propensity and realised harm in a reported observation.
- Draft terms of reference for an AI threat assessment that state question, scope, method and deliverables.
Key concepts
- The four scales of threat
- The book orders the dystopias from the individual to civilisation: the human mind, society and truth, humans wielding machines, and machines beyond control. Evidence and scope for action differ at each scale, and the scales interact.
- Evidence ladder
- Five rungs that show what support a claim has: fiction, argument, laboratory demonstration, incident in the wild and pattern at scale. The rung does not make a claim true; it shows what would move it.
- Capability, propensity, realised harm
- A capability is what a system can do when fully elicited; a propensity is how likely it is to do it in the situations it meets; a realised harm is damage that has occurred.
- Observable, expected, speculation
- The series' outlook labels, carried over from AI Governance. A commitment can rest on what is observable, preparation on what is expected, and only reversible measures on what is speculative.
- Constructive debate in four steps
- Every debate is staged as the case for concern at its strongest, the case for calm with the same charity, where the positions meet, and what can be done. Only then comes the verdict.
Interactive exercises
Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.
Interactive exercise 1 · Sort
Place each threat on its scale
The book orders the dystopias from the individual to civilisation, one part per scale. Sort each subject under the scale at which the book examines it.
Interactive exercise 2 · Scenario
Answering the motion
Apply the chapter's three responses, belief, dismissal and investigation, to a governing body's question.
Teaching plan
| 10 min | The teacher tells the story of the claim from the 2023 statements to the July 2026 incident; participants note which items are statements, which are laboratory observations and which happened outside a test. |
| 12 min | Walk through the four scales and the three ideas of the method; participants place three recent news items of their own choice on a scale and on a rung of the evidence ladder. |
| 8 min | Introduce Nordvik Region and Hansa Mutual and read the worked example ATA-NR-2026-01 together, marking the three choices the chapter calls important. |
| 22 min | Exercise in pairs: draft terms of reference for an AI threat assessment, then exchange drafts and check that each recommended decision would state reversibility and cost. |
| 8 min | Plenary discussion of what a security-led scope would have missed, and of why the book ends with a register and not a checklist. |
Discussion
- The chapter says belief leaves a board only one step, to stop using AI, which removes a small part of its exposure. Which parts of your organisation's exposure would a pause leave untouched, and why?
- Why might a laboratory scenario designed to elicit blackmail be both important evidence and weak evidence, depending on what one takes it to show?
- Nordvik risks answering too narrowly, as a cybersecurity question, and Hansa too technically. Which of the two errors is your own organisation more prone to, and what would correct it?
Written exercise
Exercise · 22 minutes
Terms of reference for an AI threat assessment
Using Nordvik Region's ATA-NR-2026-01 as a model, write terms of reference for an AI threat assessment in your own organisation or for Hansa Mutual's risk committee question of October 2026. Frame the question exactly as it was asked, so that the answer cannot substitute an easier one. List what is in scope across all four scales and what is out of scope, name the leads, the members and who provides external challenge, state the method (evidence ladder, labels, register) and list the deliverables. Require that every recommended decision states its reversibility and cost.
Deliverable: A one-page terms of reference with question, scope, team, method and deliverables, ready to be recorded with a decision record.
Self-test
Choose an answer to see whether it is right, or open the answer below each question.
According to the chapter, what does a laboratory demonstration of blackmail by a model in a simulated company establish?
Show the answer
B. A capability, little about propensity and nothing about harm
The chapter says such a demonstration establishes a capability, little about propensity and nothing about harm, whereas the July 2026 incident established all three in one unusual setting.Which feature of Nordvik's terms of reference allows a pause to be weighed fairly against controls that cost money?
Show the answer
D. Every recommended decision states its reversibility and cost
Because each decision states reversibility and cost, a pause, cheap to reverse but forgoing the benefits, can be compared with controls that cost money but keep them.Why is Hansa Mutual described as exposed twice to AI threats?
Show the answer
A. Through its own systems and through the cyber and liability policies it underwrites
As an insurer, Hansa runs agents with write access to production and also underwrites cyber and liability policies, so AI-related losses can reach it from both sides.