Near miss
A failure that occurred but produced no loss, because it was caught or because of luck. It carries the same information about the failure mechanism as an incident does, without the organization having paid for it, which is why designing a reporting channel for near misses is one of the highest return moves available in discovery. What it does not carry is consequence data, so it tells you how something breaks and not what the breakage costs.
Defined in 5 GAGE programs, which carry 8 distinct definitions of it. The wording above is taught in Certified Enterprise Governance, Risk and Compliance Professional (CEGP).
How each discipline defines it
The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.
A failure that occurred but produced no loss, because it was caught or because of luck. It carries the same information about the failure mechanism as an incident does, without the organization having paid for it, which is why designing a reporting channel for near misses is one of the highest return moves available in discovery. What it does not carry is consequence data, so it tells you how something breaks and not what the breakage costs.
An event in which a hazard occurred but was caught, contained, or otherwise prevented from causing actual harm, such as a robot's obstacle sensor stopping the robot just short of a person who stepped into its path. A near miss is direct evidence that a safeguard functioned; treating it as valuable data rather than an embarrassment encourages the reporting that surfaces design gaps before they cause real harm.
An incident in which a resident recognized and stopped a scam attempt before any money or information was actually lost. A near miss, documented with the same five-element standard as a completed loss, carries real early-warning value for identifying scam patterns actively targeting a facility's residents.
An event that almost caused a data incident but was caught or self-corrected before real harm occurred. Treated in this topic as data as valuable as an actual incident, since it reveals the same underlying gap without the cost of a real one.
An incident in which a checkpoint, control, or human intervention stopped a harmful action before it executed. A near miss still requires a severity tier and a log entry, because it is direct evidence the underlying risk is real.
Where it is taught
The exact lessons this term appears in. The first module of every program is free with a free account.
- Incident Severity · Rollout, Monitoring, and Incident Response, Certified Agentic AI Governance Professional (CAAGP)
- The post-incident review: fixing the estate, not blaming the intern · Data Incidents, Certified AI Data Governance Professional (CADGP)
- Risk discovery and horizon scanning · Risk Identification, Scenarios, and Assessment, Certified Enterprise Governance, Risk and Compliance Professional (CEGP)
- AI incidents and response · AI Governance, AI Risk, AI Security, and AI Assurance, Certified Enterprise Governance, Risk and Compliance Professional (CEGP)
- Mechanical, sensor, software, and human failure modes · Failure Analysis, Learning From How Robots Break, Engineering Judgment and Professional Formation
- Designing so that one failure does not become a disaster · Failure Analysis, Learning From How Robots Break, Engineering Judgment and Professional Formation
- Filing at IC3.gov and ReportFraud.ftc.gov, and What Happens Next · The First 24 Hours, Senior AI Scam Defense
- Documentation standards, and what happens after a report · CSFDP: Threat Command and Reporting Law, Senior AI Scam Defense
Where it shows up at work
A definition is where Near miss starts. The lessons above teach it inside the competencies below, which are what job descriptions ask for and what the GAGE credential records. Every link here is drawn from the same careers map that builds a role's readiness check.
Plans for a vendor failure, an unsafe model change or a suspended service: rollback, manual fallback, data export and safe decommissioning.
2 lessons on this page teach it as a primary outcome.
Designs safeguards, family protocols and reporting paths for older adults, minors and people who cannot challenge an automated outcome.
2 lessons on this page teach it as a primary outcome.
Classifies AI incidents by severity, runs containment, preserves evidence, manages notification, and closes the loop with lessons learned.
One lesson on this page teach it as a primary outcome.
Roles that hire for it
Each role page shows the full competency set, what the seat decides, and a readiness check against your own evidence.
- AI Incident Response Leadneeds it at depth · 1 open posting this week
- Chief Information Security Officer, AI security focusneeds it at depth
- Chief Risk Officer, AI risk editionneeds working knowledge
- AI Vendor Risk Managerneeds working knowledge
- Third-Party Cyber Risk Managerneeds working knowledge
- Chief Privacy Officer, AI privacy editionneeds working knowledge
How job descriptions say it
Postings rarely use the textbook word. These are the phrases the careers map reads as asking for the competencies above.
Where the frameworks place it: DORA; NIS2; NIST AI RMF MANAGE 4; Elder Justice Act.
One interview question about it
Your AI vendor shuts down next month. What was in your continuity and exit plan, and what did you fail to plan for?
Asked of candidates for ai resilience, continuity and exit planning. Answering it in your own words is exactly how a GAGE topic is passed, and the credential records the pass where an employer can check it.
If you come from another field
Some backgrounds already carry this competency, and the readiness check gives credit for it.
- Cybersecurity and IT carries it as a claim to back up: Continuity and recovery planning are part of the job.
- Elder services, social work, banking front line and fraud teams carries it as a claim to back up: Safeguarding vulnerable people is the profession.
- A cybersecurity or information assurance degree carries it as a claim to back up: Incident response is a course; AI incidents add model failure to the playbook.
Terms it appears with
Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.