{"id":4067,"date":"2026-10-19T10:00:20","date_gmt":"2026-10-19T09:00:20","guid":{"rendered":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/"},"modified":"2026-10-21T15:36:27","modified_gmt":"2026-10-21T14:36:27","slug":"managing-open-weight-model-risk-in-enterprise-deployments","status":"publish","type":"post","link":"https:\/\/www.whysecurity.it\/en\/managing-open-weight-model-risk-in-enterprise-deployments\/","title":{"rendered":"Managing Open-Weight Model Risk in Enterprise Deployments"},"content":{"rendered":"<p>As the AI landscape evolves, enterprises are increasingly choosing between open-weight and closed-weight models. While open-weight models offer significant flexibility for customization and inspection, they also shift the responsibility for risk management and safety safeguards onto the enterprise. Microsoft and NVIDIA have collaborated to address these challenges with the release of their new paper, &#8216;Risk Management for Open-Weight Models in Enterprise.&#8217;<\/p>\n<h3>Moving Beyond the &#8216;Open vs. Closed&#8217; Debate<\/h3>\n<p>The central thesis of the new guidance is that the degree of openness does not inherently determine an AI system&#8217;s risk. Instead, risk is a combination of the specific model, the use case, the deployment environment, and the implemented safeguards.<\/p>\n<h3>A Standardized Risk Taxonomy<\/h3>\n<p>To help cross-functional teams\u2014including engineering, security, and legal\u2014speak the same language, the whitepaper introduces a shared taxonomy divided into five core categories:<\/p>\n<ul>\n<li>Cybersecurity<\/li>\n<li>Data Protection<\/li>\n<li>Content<\/li>\n<li>Human-AI Interaction<\/li>\n<li>Bias<\/li>\n<\/ul>\n<p>This framework is designed to be adapted by enterprises to their unique operational needs, helping them map risks to concrete evidence and mitigation strategies.<\/p>\n<h3>Connecting Evaluations to Risk<\/h3>\n<p>Enterprises need evidence to manage AI risks effectively. The paper outlines how to use evaluations to quantify risks and validate controls. Tools like Microsoft Foundry play a critical role here, offering automated red teaming and content-safety controls that help detect harmful inputs and outputs. However, the authors emphasize that evaluating a model is only one piece of the puzzle; teams must also assess their data access, permissions, runtime environment, and operational controls.<\/p>\n<h3>Shared Responsibility<\/h3>\n<p>Because open-weight models allow for greater control over deployment, enterprises must clearly define who is responsible for maintaining safeguards. Whether using a managed platform or hosting models independently, organizations must ensure that controls are robust, monitored, and revisited as their applications evolve.<\/p>\n<h3>Future Outlook<\/h3>\n<p>This paper serves as the first in a series of joint resources from Microsoft and NVIDIA. Future work will expand into the runtime, harness, and application layers of AI deployments.<\/p>\n<p>We encourage developers, security professionals, and researchers to read the whitepaper, explore the joint repository of evaluation resources, and engage with the growing community effort to standardize AI safety and risk management.<\/p>","protected":false},"excerpt":{"rendered":"<p>As the AI landscape evolves, enterprises are increasingly choosing between open-weight and closed-weight models. While open-weight models offer significant flexibility for customization and inspection, they also shift the responsibility for risk management and safety safeguards onto the enterprise. Microsoft and NVIDIA have collaborated to address these challenges with the release of their new paper, &#8216;Risk [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":4068,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4067","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Managing Open-Weight Model Risk in Enterprise Deployments - CyberSecurity Experts<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.whysecurity.it\/en\/managing-open-weight-model-risk-in-enterprise-deployments\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Managing Open-Weight Model Risk in Enterprise Deployments - CyberSecurity Experts\" \/>\n<meta property=\"og:description\" content=\"As the AI landscape evolves, enterprises are increasingly choosing between open-weight and closed-weight models. While open-weight models offer significant flexibility for customization and inspection, they also shift the responsibility for risk management and safety safeguards onto the enterprise. Microsoft and NVIDIA have collaborated to address these challenges with the release of their new paper, &#8216;Risk [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.whysecurity.it\/en\/managing-open-weight-model-risk-in-enterprise-deployments\/\" \/>\n<meta property=\"og:site_name\" content=\"CyberSecurity Experts\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/whysec\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-19T09:00:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-21T14:36:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.whysecurity.it\/wp-content\/uploads\/2026\/10\/immagine-3.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"940\" \/>\n\t<meta property=\"og:image:height\" content=\"627\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"whysecurity\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"whysecurity\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/\"},\"author\":{\"name\":\"whysecurity\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#\\\/schema\\\/person\\\/aa3b7e95e9fd51fd7f39d48911fdfe0a\"},\"headline\":\"Managing Open-Weight Model Risk in Enterprise Deployments\",\"datePublished\":\"2026-10-19T09:00:20+00:00\",\"dateModified\":\"2026-10-21T14:36:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/\"},\"wordCount\":359,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.whysecurity.it\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/immagine-3.jpg\",\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/\",\"url\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/\",\"name\":\"Managing Open-Weight Model Risk in Enterprise Deployments - CyberSecurity Experts\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.whysecurity.it\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/immagine-3.jpg\",\"datePublished\":\"2026-10-19T09:00:20+00:00\",\"dateModified\":\"2026-10-21T14:36:27+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.whysecurity.it\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/immagine-3.jpg\",\"contentUrl\":\"https:\\\/\\\/www.whysecurity.it\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/immagine-3.jpg\",\"width\":940,\"height\":627},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/managing-open-weight-model-risk-in-enterprise-deployments\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.whysecurity.it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Managing Open-Weight Model Risk in Enterprise Deployments\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#website\",\"url\":\"https:\\\/\\\/www.whysecurity.it\\\/\",\"name\":\"WhySecurity\",\"description\":\"Cyber Security Network Services\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.whysecurity.it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#organization\",\"name\":\"WhySecurity\",\"url\":\"https:\\\/\\\/www.whysecurity.it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/tempnewweb.whysecurity.it\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/logo_white.png\",\"contentUrl\":\"https:\\\/\\\/tempnewweb.whysecurity.it\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/logo_white.png\",\"width\":500,\"height\":91,\"caption\":\"WhySecurity\"},\"image\":{\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/whysec\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.whysecurity.it\\\/#\\\/schema\\\/person\\\/aa3b7e95e9fd51fd7f39d48911fdfe0a\",\"name\":\"whysecurity\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g\",\"caption\":\"whysecurity\"},\"sameAs\":[\"https:\\\/\\\/whysecurity.it\"],\"url\":\"https:\\\/\\\/www.whysecurity.it\\\/en\\\/author\\\/whysecurity\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Managing Open-Weight Model Risk in Enterprise Deployments - CyberSecurity Experts","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.whysecurity.it\/en\/managing-open-weight-model-risk-in-enterprise-deployments\/","og_locale":"en_US","og_type":"article","og_title":"Managing Open-Weight Model Risk in Enterprise Deployments - CyberSecurity Experts","og_description":"As the AI landscape evolves, enterprises are increasingly choosing between open-weight and closed-weight models. While open-weight models offer significant flexibility for customization and inspection, they also shift the responsibility for risk management and safety safeguards onto the enterprise. Microsoft and NVIDIA have collaborated to address these challenges with the release of their new paper, &#8216;Risk [&hellip;]","og_url":"https:\/\/www.whysecurity.it\/en\/managing-open-weight-model-risk-in-enterprise-deployments\/","og_site_name":"CyberSecurity Experts","article_publisher":"https:\/\/www.facebook.com\/whysec","article_published_time":"2026-10-19T09:00:20+00:00","article_modified_time":"2026-10-21T14:36:27+00:00","og_image":[{"width":940,"height":627,"url":"https:\/\/www.whysecurity.it\/wp-content\/uploads\/2026\/10\/immagine-3.jpg","type":"image\/jpeg"}],"author":"whysecurity","twitter_card":"summary_large_image","twitter_misc":{"Written by":"whysecurity","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/#article","isPartOf":{"@id":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/"},"author":{"name":"whysecurity","@id":"https:\/\/www.whysecurity.it\/#\/schema\/person\/aa3b7e95e9fd51fd7f39d48911fdfe0a"},"headline":"Managing Open-Weight Model Risk in Enterprise Deployments","datePublished":"2026-10-19T09:00:20+00:00","dateModified":"2026-10-21T14:36:27+00:00","mainEntityOfPage":{"@id":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/"},"wordCount":359,"commentCount":0,"publisher":{"@id":"https:\/\/www.whysecurity.it\/#organization"},"image":{"@id":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/#primaryimage"},"thumbnailUrl":"https:\/\/www.whysecurity.it\/wp-content\/uploads\/2026\/10\/immagine-3.jpg","articleSection":["Cybersecurity"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/","url":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/","name":"Managing Open-Weight Model Risk in Enterprise Deployments - CyberSecurity Experts","isPartOf":{"@id":"https:\/\/www.whysecurity.it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/#primaryimage"},"image":{"@id":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/#primaryimage"},"thumbnailUrl":"https:\/\/www.whysecurity.it\/wp-content\/uploads\/2026\/10\/immagine-3.jpg","datePublished":"2026-10-19T09:00:20+00:00","dateModified":"2026-10-21T14:36:27+00:00","breadcrumb":{"@id":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/#primaryimage","url":"https:\/\/www.whysecurity.it\/wp-content\/uploads\/2026\/10\/immagine-3.jpg","contentUrl":"https:\/\/www.whysecurity.it\/wp-content\/uploads\/2026\/10\/immagine-3.jpg","width":940,"height":627},{"@type":"BreadcrumbList","@id":"https:\/\/www.whysecurity.it\/managing-open-weight-model-risk-in-enterprise-deployments\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.whysecurity.it\/"},{"@type":"ListItem","position":2,"name":"Managing Open-Weight Model Risk in Enterprise Deployments"}]},{"@type":"WebSite","@id":"https:\/\/www.whysecurity.it\/#website","url":"https:\/\/www.whysecurity.it\/","name":"WhySecurity","description":"Cyber Security Network Services","publisher":{"@id":"https:\/\/www.whysecurity.it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.whysecurity.it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.whysecurity.it\/#organization","name":"WhySecurity","url":"https:\/\/www.whysecurity.it\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.whysecurity.it\/#\/schema\/logo\/image\/","url":"https:\/\/tempnewweb.whysecurity.it\/wp-content\/uploads\/2025\/10\/logo_white.png","contentUrl":"https:\/\/tempnewweb.whysecurity.it\/wp-content\/uploads\/2025\/10\/logo_white.png","width":500,"height":91,"caption":"WhySecurity"},"image":{"@id":"https:\/\/www.whysecurity.it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/whysec"]},{"@type":"Person","@id":"https:\/\/www.whysecurity.it\/#\/schema\/person\/aa3b7e95e9fd51fd7f39d48911fdfe0a","name":"whysecurity","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ca59ad0cd8de5b2222178a2dfd751991a577b51363cd53356ed10b18f5c54a2c?s=96&d=mm&r=g","caption":"whysecurity"},"sameAs":["https:\/\/whysecurity.it"],"url":"https:\/\/www.whysecurity.it\/en\/author\/whysecurity\/"}]}},"_links":{"self":[{"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/posts\/4067","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/comments?post=4067"}],"version-history":[{"count":4,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/posts\/4067\/revisions"}],"predecessor-version":[{"id":4072,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/posts\/4067\/revisions\/4072"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/media\/4068"}],"wp:attachment":[{"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/media?parent=4067"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/categories?post=4067"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whysecurity.it\/en\/wp-json\/wp\/v2\/tags?post=4067"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}