Risk Academy, a Nexortium programmeTechnology and Digital SystemsDepartment of Artificial Intelligence and Autonomous Systems

Evaluation design, red-teaming, benchmarks and safety cases

AI safety and evaluation

AI safety and evaluation covers how the capabilities, reliability and risks of AI systems are tested before and after deployment.

risksacademy.comtechnology-digitaldiscipline

AI safety and evaluation, drawn as a circuit: 0 primary courses open, 0 in preparation, 2 approved for authoring and 0 also taught here, across 8 subtopics. Courses: RAS-428 L3 approved for authoring, RAT-239 L3 approved for authoring.AI safety and evaluationRAS-428RAT-239
AI safety and evaluation at a glance. Drawn as a circuit.
  • Open, 0
  • In preparation, 0
  • Approved for authoring, 2
  • Subtopics, 8
Course codes from the curriculum; study levels L1 to L4.
Twin builder and simulatorWest Cornwall: Goonhilly and the Porthcurno cable landings4 twin generators, 8 layers, 3 instruments
courses open now
0
in preparation
0
approved for authoring
2
satellite dishes
4

Twin figures for West Cornwall: Goonhilly and the Porthcurno cable landings, counted from its layers at their stated dates.

Twin builder and simulator.

For AI safety and evaluation: the faculty's twin of the Lizard and Penwith on the planet map, the globe and in 3D. Pick a generator, switch layers, run the instruments; every layer prints its provider and date.

West Cornwall: Goonhilly and the Porthcurno cable landings: a flat plan of the faculty twin. Terrain 0 to 245 m; 4 satellite dishes; 74 communication masts and towers; 12 telephone exchanges; 7 data centres and cable landing stations; 12 aerodromes; 1 telecom offices; Communication line 161 km; 729 known exploited vulnerabilities since 2023-10-17; Night-time lights, VIIRS day-night band: live, loads in the twin. Contours every 25 metres from the elevation grid; communication cables by class; ground infrastructure as marks.
West Cornwall: Goonhilly and the Porthcurno cable landings, United Kingdom. Flat plan of the same data: relief as contours from the inline grid, the mapped ground infrastructure by kind, the mapped cables and the numbers below. The 3D twin opens on devices with WebGL once its data and library have been checked.
  • Terrain 0 to 245 m
  • 4 satellite dishes
  • 74 communication masts and towers
  • 12 telephone exchanges
  • 7 data centres and cable landing stations
  • 12 aerodromes
  • 1 telecom offices
  • Communication line 161 km
  • 729 known exploited vulnerabilities since 2023-10-17
  • Night-time lights, VIIRS day-night band: live, loads in the twin
Credits and dates per layer are listed under the stage. Relief in the twin is exaggerated ×1.5 for legibility.

Drag to move, right drag or Shift with a drag to turn and tilt, Ctrl with the wheel to zoom. Keyboard: arrows move, Shift with arrows turn and tilt, + and - zoom, 0 resets, V steps through the views, Escape clears.

Flat plan of the same data: relief as contours from the inline grid, the mapped ground infrastructure by kind, the mapped cables and the numbers below. The 3D twin opens on devices with WebGL once its data and library have been checked.

The map loads from this site as it nears the view (MapLibre 6.9.1, checked by hash).

The discipline in brief.

The discipline teaches evaluation design with stated tasks, metrics and evidence, red-teaming and adversarial testing, benchmark contamination and evaluation awareness, dangerous capability evaluations, monitoring after deployment and incident reporting, and the safety case as the argument that ties them together, following the holistic evaluation taxonomy of Liang et al. (2022) for metrics and the NIST AI Risk Management Framework 1.0 for the measure function, with the International AI Safety Report of February 2026 as the current evidence review. The evaluation ledger on the faculty home is the discipline's working instrument: records with evidence links, summary statistics per metric, unsupported entries marked. A graduate can design an evaluation that a benchmark alone cannot answer, run a red-team exercise with a stated scope, and write a safety case that names the hazards it does not cover.

This area covers how the capabilities, reliability and risks of AI systems are tested before and after deployment: evaluation design, red-teaming, benchmarks and their limits, safety cases for frontier models and agentic systems, and incident reporting. It is taught in the department of Artificial Intelligence and Autonomous Systems, Faculty of Technology and Digital Systems, through courses still to be authored.

What the discipline covers.

8 subtopics, taught across its courses and labs.

Courses
0 open, 0 in preparation
Levels
None yet
Labs
Named when the courses are authored
  • Evaluation design and metrics
  • Red-teaming and adversarial testing
  • Benchmarks and data contamination
  • Dangerous capability evaluations
  • Safety cases for frontier models
  • Agentic system evaluation
  • Monitoring after deployment
  • Incident reporting and disclosure

Not yet taught by a course: AI system evaluation methods; Frontier AI risk and safety cases.

What is changing now.

Recent developments in aI safety and evaluation, each with its source; sources checked on 16 October 2026. Summaries are short readings of the source; follow the link for the full account.

The faculty hub.

News and research as they are published, per discipline, with the faculty's other tools.

The newest research, preprints, news and humanitarian reports for AI safety and evaluation, each with its source and date, load here. Open the research and news hub

No course yet.

No course has this as its primary discipline yet. It is listed so the gap stays visible.

The courses on its authoring list are named below.

2 courses approved for authoring.

Approved for authoringno enrolment and no achievement until authored and reviewed

  1. RAS-428Frontier AI Risk: Foundation Models, Agents and Safety CasesApproved for authoringL3 Advanced, about 12 hours (estimate)
  2. RAT-239AI System Evaluation MethodsApproved for authoringL3 Advanced, about 10 hours (estimate)

What you can earn here.

  1. Course achievements

    One for each of the 0 courses with this primary discipline, when you pass its assessed activities; 0 can be earned now.

Achievements record learning completed here; they do not certify competence. How recognition works.

Where the subject is worked on.

Cited as places where the subject is practised; the institutions named are sources here, and Risk Academy hosts every course.

The three Foundry systems where it is practised.

Terms used on this page.

AI safety and evaluation

Prepare with a related course.

Open courses in connected disciplines teach the methods this discipline will build on.

Skip to toolbar