# Microsoft — Managing open-weight model risk in enterprise deployments

- Company: Microsoft (microsoft.com)
- Announced: 2026-10-16T16:05:00+00:00
- Category: safety-policy-update
- Coverage: not counted
- Announcement: yes
- Group: announcements
- Source: https://www.microsoft.com/en-us/security/blog/2026/10/16/managing-open-weight-model-risk-in-enterprise-deployments/
- Record: https://forck.live/items/30323-managing-open-weight-model-risk-in-enterprise-deployments
- Subject: Azure AI

Microsoft and NVIDIA are publishing Risk Management for Open-Weight Models in Enterprise, the first in a planned series of joint resources for enterprises weighing open-weight deployments. The paper argues that weight openness alone does not determine an AI system's risk, and that risk instead depends on the model, use case, deployment, and safeguards. It introduces a shared taxonomy that sorts risks into five categories: Cybersecurity, Data Protection, Content, Human-AI Interaction, and Bias. The guidance is grounded in established standards and frameworks, including ISO standards and the NIST AI Risk Management Framework, and is meant to be adapted by enterprises to their own systems, use cases, and risk criteria. The paper maps evaluations to a selection of risks across the five categories so teams can start from a risk that matters for their deployment and find evaluations that produce relevant evidence. Microsoft Foundry is cited as offering built-in and custom evaluations, automated red teaming, and configurable content-safety controls, which teams should validate for their model and deployment, including preview status. This first paper focuses on the model layer, and Microsoft and NVIDIA say future work will extend the approach across the runtime, harness, and application layers.

## Evidence

Verbatim from https://www.microsoft.com/en-us/security/blog/2026/10/16/managing-open-weight-model-risk-in-enterprise-deployments/:

> The growing AI landscape is giving enterprises more choice in how they build, customize, and deploy increasingly capable models. Open-weight models are an important part of that landscape. They give enterprises access to model weights and greater flexibility to inspect, evaluate, modify, and run models within their own environments.
> 
> While that flexibility can be valuable, it also affects how enterprises evaluate models, where they implement safeguards, and who is responsible for maintaining those safeguards over time.
> 
> As enterprises choose which models to deploy, the relevant question is broader than whether a model is open-weight or closed-weight. Enterprises need to understand what they are using the model for, what could go wrong in that context, and what evidence and controls they need to manage risks.
> 
> Today, Microsoft and NVIDIA are publishing Risk Management for Open-Weight Models in Enterprise, the first in a planned series of joint resources intended to help enterprises address those questions.

---

Record: https://forck.live/items/30323-managing-open-weight-model-risk-in-enterprise-deployments
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md