NVIDIA/OpenEnterpriseRiskManagementGuidance

NVIDIA/OpenEnterpriseRiskManagementGuidance

Description: Companion repository to Risk Management for Open-Weight Models in Enterprise. Hosted in the NVIDIA org; NVIDIA and Microsoft are co-maintainers with parity on review and release.

License: NOASSERTION

Stars: 2

Forks: 0

Open issues: 0

Created: 2026-10-12T06:42:28Z

Pushed: 2026-10-16T03:18:22Z

Default branch: main

Fork: no

Archived: no

README:

OpenEnterpriseRiskManagementGuidance

Risk Management for Open-Weight Models

Open-weight models give enterprises greater control to inspect, evaluate, modify, and operate models in their own environments. This flexibility also changes how models are evaluated, where safeguards are applied, and who maintains them over time.

This joint NVIDIA–Microsoft repository offers resources to help enterprises deploy open-weight models safely, securely, and responsibly. The repository is organized as follows.

Papers

Guidance papers to support risk management and governance of open-weight model deployments.

Taxonomy

The risk taxonomy provides a shared vocabulary for how risks arise in AI systems, grouping risk types (L2) under broader risk categories (L1) to support effective management. It will be updated regularly as new risks emerge.

Evaluations

Maps evaluations to the risk taxonomy and will be updated regularly with open-source benchmarks, evaluations published by NVIDIA and Microsoft, and community contributions.

Mitigations

Controls, organized by system layer (model, runtime, harness, and application).

Contributing

We encourage developers, security practitioners, researchers, and others working in this space to contribute evaluations that can help strengthen this shared body of work. Open a propose-evaluation issue with the risk type it addresses, the task and language it covers, its scoring method, and its known limitations. Mapping gaps and new risk types are equally welcome.

Maintainership

This repository sits in the NVIDIA org and is co-maintained by NVIDIA and Microsoft. Changes to taxonomy/ and evaluations/index.yaml require approval from a maintainer at each organization; CODEOWNERS enforces this and how a third-party contributor becomes a maintainer. Everything else follows ordinary single-approval review.

Citing this work

Microsoft and NVIDIA. *Risk Management for Open-Weight Models in Enterprise.* Edited by Andrew Berkley, April Chen, Michael Boone, Eileen Long, and Arun Rao. October 2026. https://github.com/NVIDIA/OpenEnterpriseRiskManagementGuidance

BibTeX

@techreport{msft_nvidia_2026_openweight,
author = {{Microsoft} and {NVIDIA}},
editor = {Berkley, Andrew and Chen, April and Boone, Michael and Long, Eileen and Rao, Arun},
title = {Risk Management for Open-Weight Models in Enterprise},
institution = {Microsoft and NVIDIA},
year = {2026},
month = oct,
url = {https://github.com/NVIDIA/OpenEnterpriseRiskManagementGuidance}
}