<?xml version="1.0" encoding="UTF-8"?>
<PerformancePlanOrReport xmlns="urn:ISO:std:iso:17469:tech:xsd:PerformancePlanOrReport" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

 xsi:schemaLocation="urn:ISO:std:iso:17469:tech:xsd:PerformancePlanOrReport http://stratml.us/references/PerformancePlanOrReport20160216.xsd" Type="Strategic_Plan"><Name>Risk Management in the AI Era: Navigating the Opportunities and Challenges of AI Tools in the Public Sector </Name><Description>AI tools present both immense opportunities and challenges to good governance that should be considered and weighed carefully well before the adoption and implementation of the tools themselves. </Description><OtherInformation>... we distill our theoretical and empirical discussions of artificial intelligence tools in the public sector into recommendations for developing appropriate risk management processes. They are meant to help guide public managers as they consider, adopt, and implement AI tools to augment and automate tasks within their organizations. We base these recommendations on our analysis of existing federal policy, findings from the two case studies, and the existing academic research on innovation adoption in general and AI tools in particular. The recommendations are [documented as goals and objectives in this StratML rendition]</OtherInformation><StrategicPlanCore><Organization><Name>IBM Center for The Business of Government</Name><Acronym>CTBG</Acronym><Identifier>_a11d00e8-2dfe-11df-91fe-13597a64ea2a</Identifier><Description>Through research stipends and events, the IBM Center for The Business of Government stimulates research and facilitates discussion of new approaches to improving the effectiveness of government at the federal, state, local, and international levels.</Description><Stakeholder StakeholderTypeType="Person"><Name>Justin B. Bullock</Name><Description>Co-Author -- Texas A&amp;M University -- Justin B. Bullock is an assistant professor in the Public Service and Administration department and a research fellow in the Institute for Science,
Technology and Public Policy. Bullock earned his PhD in public administration
and policy with a specialization in public management and public policy from
the University of Georgia in 2014, as well as a master’s in public
administration and a bachelor’s in business administration, also from the
University of Georgia.
Dr. Bullock has a number of interests at the intersects of public administration,
public management, artificial intelligence, digital governance, and digital
discretion. He is interested in the effects on governance, administration, and
society of the rapid changes in decision making tools and data. He is also
interested in what new opportunities, challenges, and questions these rapid
changes pose for governance and society.</Description></Stakeholder><Stakeholder StakeholderTypeType="Person"><Name>Matthew M. Young</Name><Description>Co-Author -- Syracuse University -- Matthew M. Young is an Assistant Professor of Public Administration and
International Affairs at the Maxwell School at Syracuse University. His research
interests include public management, innovation and technology adoption and
use by the public sector, and service delivery. Dr. Young’s work on in the
public sector technological innovation has been published in top public
administration and management journals, including Public Administration
Review, Public Management Review, and Perspectives on Public Management
and Governance, among others. He earned his PhD in Public Policy and
Management as well as a Master of Public Policy at the University of Southern
California Sol Price School of Public Policy, and a Bachelor of Arts degree in
Political Science at the University of California at Berkeley. Before joining the
academy, Dr. Young worked for more than a decade in Silicon Valley in
software engineering, product management, and consulting.</Description></Stakeholder><Stakeholder StakeholderTypeType="Person"><Name>Daniel J. Chenok</Name><Description>Executive Director, IBM Center for The Business of Government</Description></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Public Managers</Name><Description>This report provides public managers with a framework for managing the risks associated with the public sector’s entrance into the AI era...
This list [of recommendations] is not meant to serve as a standalone risk management strategy for public sector adoption of AI. Rather, we intend it to provide public managers with a starting set of basic considerations informed by the latest field research and practice to serve as a first step in developing an effective risk management framework for their organizations.</Description></Stakeholder></Organization><Vision><Description>The risks associated with the public sector’s entrance into the AI era are managed</Description><Identifier>_f03c1626-85a2-11ea-9dd4-560e0383ea00</Identifier></Vision><Mission><Description>To guide public managers as they consider, adopt, and implement AI tools</Description><Identifier>_f03c17ac-85a2-11ea-9dd4-560e0383ea00</Identifier></Mission><Value><Name/><Description/></Value><Goal><Name>Capacity &amp; Analyses</Name><Description>Commit to up-front and ongoing investments in management capacity and analysis related to both AI and existing organizational processes.</Description><Identifier>_f03c18ba-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>1</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Public Managers</Name><Description>The field of AI is evolving too rapidly to expect nonspecialists to stay at the cutting edge, but public managers must familiarize themselves with the fundamental and general concepts and capacities in order for any risk management approach to succeed. </Description></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>Canadian Government</Name><Description>The Canadian government formalizes this approach in its 2019 Directive on Automated Decision-Making.</Description></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Higher Education Programs</Name><Description>A second example is adding organizational capacity by hiring candidates from the rapidly growing set of data analytic specializations and dual-degree options in existing public administration and policy graduate programs. Higher education programs have broadly acknowledged both supply- and demand-side pressures for graduates with expertise not only in the traditional facets of public administration and policy analysis, but modern analytic techniques and data management practices.</Description></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>City of Syracuse</Name><Description>The case of the City of Syracuse’s infrastructure investments exemplifies the value of this approach. By deciding to continue to staff and fund the innovation team initially established through nonprofit grant funding, Syracuse retained the in-house expertise necessary to identify and leverage the potential for the city to leapfrog to next generation, AI-enabling infrastructure.</Description></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>City of Bryan</Name><Description>The City of Bryan also highlights this approach through its ongoing partnership with world-leading engineers at Texas A&amp;M University as they pilot and refine the use of self-driving trolleys in an iterative process that both researchers and City officials have committed to.</Description></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Senior Personnel</Name><Description>At the same time, these skills are also a critical need for more senior, established personnel who represent the current generation of decision makers.</Description></Stakeholder><OtherInformation/><Objective><Name>Data &amp; IT</Name><Description>Assess your data and IT capacity.</Description><Identifier>_f03c1b44-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>1.1</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation>As part of this investment, consider dedicating resources—whether internal or contracted by a third party—to assess your current data and IT capacity, and determine what tasks or processes may be improved by incorporating AI tools.</OtherInformation></Objective><Objective><Name>Tasks &amp; Processes</Name><Description>Determine what tasks or processes may be improved by incorporating AI tools.</Description><Identifier>_f03c1c66-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>1.2</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation/></Objective><Objective><Name>Training</Name><Description>Build internal capacity by seeking out AI training for current employees.</Description><Identifier>_f03c1d74-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>1.3</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation> </OtherInformation></Objective><Objective><Name>Information</Name><Description>Stay informed on the latest AI tools, their cost, and their reliability.</Description><Identifier>_f03c1ee6-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>1.4</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation/></Objective><Objective><Name>Procedures</Name><Description>Adapt existing risk identification procedures to AI adoption decisions.</Description><Identifier>_f03c1ff4-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>1.5</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation>One example of this approach is the adaptation of existing risk identification procedures as a required element of any AI adoption decision. Many organizational decisions that predate AI have long required risk review and compliance checks from technical and/or legal experts.
Investing in adapting these review processes minimizes duplication of effort and additional complexity from adding wholly novel routines...</OtherInformation></Objective><Objective><Name>Performance Management</Name><Description>Incorporate recognition of AI training and education into performance management and personnel reviews.</Description><Identifier>_f03c2102-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>1.6</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation>One approach to meeting this need is incorporating recognition of ongoing professional training and education on both the technical and managerial implications of AI into performance management and personnel review programs. This training could include executive education programs or even Massively Open Online Course (MOOC)-style asynchronous online options, but integrating whichever approach is deemed best to performance plans where appropriate for the position will help align managerial and employee incentives around developing internal capacity to understand and manage AI-related risks.</OtherInformation></Objective></Goal><Goal><Name>Tools &amp; Tasks</Name><Description>Manage risk by maximizing goodness of fit between tool and task.</Description><Identifier>_f03c2210-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>2</SequenceIndicator><Stakeholder StakeholderTypeType="Organization"><Name>Canadian Government</Name><Description>As with the adaption of risk review processes, the Canadian government’s Directive on Automated Decision-Making is a clear example of how to put this recommendation into practice. It identifies four discrete levels of impact arising from the use of AI in administrative decision making, ranging from those that have little likely and/or brief and reversible impact on the rights, well-being, and economic interests of individuals and communities, to those that will create irreversible, permanent impacts. Each impact level is then assigned a minimum standard of review from internal and external experts and review boards. In practice, this approach is interdependent with both the preceding and following recommendations.</Description></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>City of Bryan</Name><Description>Organizations must have both internal expertise and knowledge of and relationships with external experts for such review processes to be effective.
The case of the City of Bryan self-driving trolleys also highlights a process of risk management and maximizing goodness of fit between tool and task. As the self-driving trolleys are being iteratively tested and improved, their routes throughout the city are kept short, do not cross major roadways, and maintain a low speed. This way, the trolleys—even in the case of a driving error or software malfunction—are operating at such a slow speed that it would be unlikely that the passengers or other vehicles would suffer serious injury. As the trolleys are further tested and developed, their routes will be expanded as well as their general benefits to the residents of the city.</Description></Stakeholder><OtherInformation>Avoid the temptation to integrate AI tools into existing or new processes as a method of virtue signaling how future-ready your organization is.</OtherInformation><Objective><Name>Consequences</Name><Description>Consider the consequences of a task that is being considered for automation.</Description><Identifier>_f03c231e-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>2.1</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation>Take the time and effort to seriously consider the consequences of a task that is being considered for automation.</OtherInformation></Objective><Objective><Name>Pilots</Name><Description>Pilot AI tool augmentation with tasks that are routine, repetitive, and contain quality data.</Description><Identifier>_f03c2422-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>2.2</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation>Manage upfront risk by looking to tasks that are routine, repetitive, and contain quality data as pilot cases for AI tool augmentation.</OtherInformation></Objective><Objective><Name>Effectiveness &amp; Efficiency</Name><Description>Estimate the improvements in effectiveness and efficiency from implementing AI tools.</Description><Identifier>_f03c254e-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>2.3</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation>Estimate the improvements in both effectiveness and efficiency from implementing AI tools into existing or new processes ex ante, weigh them against the corresponding risk costs, and use robust sensitivity analysis to challenge every modeling assumption involved.</OtherInformation></Objective><Objective><Name>Privacy, Ethics &amp; Liberty</Name><Description>Consider privacy, ethical, and personal liberty concerns.</Description><Identifier>_f03c2670-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>2.4</SequenceIndicator><Stakeholder><Name/><Description/></Stakeholder><OtherInformation>Carefully consider all privacy, ethical, and personal liberty concerns with the use of data and the deployment of AI tools.</OtherInformation></Objective></Goal><Goal><Name>Relationships</Name><Description>Leverage existing relationships and foster new ones to share knowledge.</Description><Identifier>_f03c2792-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>3</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Research Universities</Name><Description>Both of the local governments profiled in this report’s case studies made direct and substantial use of this approach through their coordination with local research universities.</Description></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>City of Bryan</Name><Description>The City of Bryan worked closely and iteratively with experts and world-leading engineers from Texas A&amp;M University, from project ideation through implementation.</Description></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>Texas A&amp;M University</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>City of Syracuse</Name><Description>In the case of the City of Syracuse, its Office of Accountability, Performance, &amp; Innovation collaborated with Syracuse University’s School of Information Studies and College of Engineering and Computer Science, as well as private technology vendors, in identifying and planning for future uses of its developing Smart City and 5G Wireless infrastructure as part of the city’s “Smart Surge” initiative.</Description></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Local Governments</Name><Description>Smaller local governments that do not have a geographic or historic affiliation with a college or university could look to establish new connections with the alma maters of their senior leadership. They should also look for opportunities to solicit national-level partners across the public, private, and nonprofit sectors that are motivated to extend their expertise beyond major metropolitan centers.</Description></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>State Governments</Name><Description>The reciprocal of this example is also true: federal and state governments should engage with local and regional officials not only in disseminating risk management strategies, but in their development. The breadth of variation in initial conditions, capacities, and constraints across localities make them a tremendous asset for reducing uncertainty. This can be achieved by improving policymakers’ ex ante understanding of both what needs to go right and what can go wrong as AI implementation becomes more diffused and commonplace.</Description></Stakeholder><OtherInformation>Don’t bowl alone: Leverage existing relationships and foster new ones
to share knowledge.
 The details of prior successes—and failures—of peer governments, organizations, and agencies with using AI tools are the most valuable asset for public managers looking to minimize their own risks with similar projects.</OtherInformation><Objective><Name>Professional Associations</Name><Description>Use professional associations to share knowledge.</Description><Identifier>_f03c2b98-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>3.1</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Professional Associations</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Organization"><Name>ICMA</Name><Description/></Stakeholder><OtherInformation>Consider using existing professional associations (e.g., ICMA, etc.) to create working groups, email lists, and other channels for knowledge sharing.</OtherInformation></Objective><Objective><Name>Partnerships</Name><Description>Draw on existing partnerships and pursue new ones.</Description><Identifier>_f03c2ce2-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>3.2</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>Industry</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Academia</Name><Description/></Stakeholder><Stakeholder StakeholderTypeType="Generic_Group"><Name>Nonprofits</Name><Description/></Stakeholder><OtherInformation>Draw on existing partnerships and pursue new ones with those outside the public sector in industry, academia, and related nonprofits. Use the knowledge gained through these networks to avoid needless risks.</OtherInformation></Objective><Objective><Name>Contracts</Name><Description>Carefully negotiate contracts with AI tool providers.</Description><Identifier>_f03c2e22-85a2-11ea-9dd4-560e0383ea00</Identifier><SequenceIndicator>3.3</SequenceIndicator><Stakeholder StakeholderTypeType="Generic_Group"><Name>AI Tool Providers</Name><Description/></Stakeholder><OtherInformation>Carefully negotiate contracts with private providers of AI tools, be aware of their records of accomplishment, their respect for citizen privacy, and the ability to retain levels of expertise and manageability in house.</OtherInformation></Objective></Goal></StrategicPlanCore><AdministrativeInformation><StartDate/><EndDate/><PublicationDate>2020-04-23</PublicationDate><Source>http://www.businessofgovernment.org/sites/default/files/Risk%20Management%20in%20the%20AI%20Era.pdf</Source><Submitter><GivenName>Owen</GivenName><Surname>Ambur</Surname><PhoneNumber/><EmailAddress>Owen.Ambur@verizon.net</EmailAddress></Submitter></AdministrativeInformation></PerformancePlanOrReport>