Nordvik Region and Hansa Mutual: Threat Conclusions

All courses / AI Threat / Module 7 / Chapter 33

Learning objectives

After the lesson the participant can:

• Describe Nordvik Region's and Hansa Mutual's answers, including what each decided not to do.
• Explain the four reasons the answers differ: mandate, exposure, scale and capacity, and regulation.
• Compare the two threat registers by scale and identify the gaps neither organisation can solve alone.
• Write a one-page AI threat statement with answer, commitments by scale, items declined, unresolved gaps and review rule.

Key concepts

One method, two forums

Both assessments graded every claim on the evidence ladder and labelled every outlook. Nordvik answered elected politicians in public, so its discipline was publicity; Hansa answered a board committee under supervision, so its discipline was supervisory challenge.

No general pause

Nordvik's answer to the council: a pause would remove little of the risk the motion described and some of the Region's means of meeting it. Instead it set commitments at every scale, each tied to a register entry, an owner and a date.

AI threat in the ORSA by evidence rung

Hansa's answer: threats at pattern at scale or incident in the wild enter existing operational and cyber scenarios; the accumulation of AI-related losses enters as scenario analysis; speculative entries enter as labelled reverse stress tests with no probability assigned.

AI threat statement

One page kept in version control beside the register: the answer, the commitments by scale with the entries behind them, what was declined, what remains unresolved and when the statement will be reviewed.

Buying and building

Nordvik mostly procures, so its leverage and controls are contractual and procedural; Hansa mostly builds, so its controls are engineered into its platform. The distinction applies to threat as much as to capability.

Interactive exercises

Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.

Teaching plan

Discussion

1. Each statement declined something a less disciplined answer would have promised. What would a less disciplined answer have promised in your organisation, and who would have asked for it?
2. Both found that the threat reaching them first is not the dramatic one. What is the undramatic threat most likely to reach your organisation first, and does it have an owner?
3. Nordvik's regulator is publicity as much as any authority; Hansa's answer had to survive supervisory challenge in seven jurisdictions. Who challenges your organisation's answer, and how would you know the challenge was real?

Written exercise

Self-test

Choose an answer to see whether it is right, or open the answer below each question.

1. Why did Nordvik Region's report recommend no general pause of AI?

   1. The Region's supervisory authority prohibited a pause of high-risk AI systems before December 2027 at the earliest
   2. A pause would remove little of the risk the motion described and some of the Region's means of meeting it
   3. The Region had no AI systems that could be paused
   4. The council had withdrawn its motion before the report
   Show the answer

   B. A pause would remove little of the risk the motion described and some of the Region's means of meeting it
   The misuse threat comes from attackers' AI and the threat beyond control reaches the Region through suppliers whether or not it uses AI; no register entry would have been reduced more by a pause than by the commitments.

2. What did Hansa's reverse stress test of THR-HM-09 find?

   1. Solvency fails if any single model provider has an outage
   2. The scenario requires an immediate increase in capital
   3. The probability of systemic loss of control is about five per cent, the median of the largest researcher survey
   4. Solvency survives provider failure or portfolio losses alone, but not both together with a market disruption
   Show the answer

   D. Solvency survives provider failure or portfolio losses alone, but not both together with a market disruption
   The finding shows that the group's realistic exposure arrives long before any catastrophe; the entry changes no capital figure and no probability was assigned.

3. Which gap do both organisations share that neither can solve alone?

   1. Concentration: dependence on accelerators, cloud capacity and a few model developers
   2. The absence of any threat register in either organisation
   3. The lack of a works council in both organisations
   4. The prohibition of open-weight models for public authorities and insurers in the Union
   Show the answer

   A. Concentration: dependence on accelerators, cloud capacity and a few model developers
   Both have verified their own sovereignty properties but not the supply chain beneath them; the other shared gaps are frontier evidence, the information environment and the systemic threat itself.