The field separates risk into misuse, accidents and structural harm. Why each kind needs a different remedy, and where the disagreements between researchers lie.
A company finds that its recruitment model has been used by a manager to screen candidates in a way the company never authorised, using a workflow the manager built themselves. The model works exactly as designed. Which category of risk is this?
AMisuse, because the system worked as intended and somebody used it to cause harm.
BAn accident, because the model was applied to a task it was not evaluated for.
CStructural harm, because it reflects competitive pressure inside the company.
DMisalignment, because the model pursued an objective its designers did not intend.