Join our Newsletter — 33% off our NHI Course
Home› Glossary› Foundations & NHI Taxonomy› Baseline Sensitivity
Foundations & NHI Taxonomy

Baseline Sensitivity

← Back to Glossary
By NHI Mgmt Group Updated October 12, 2026 Domain: Foundations & NHI Taxonomy

Baseline sensitivity is the degree to which an explanation changes when the reference point or counterfactual input changes. High sensitivity means the explanation may be unstable, which reduces its value for governance, audit, and user-facing decisions.

What Baseline Sensitivity Means in Practice

Baseline sensitivity describes how much an explanation changes when the reference point, comparison set, or counterfactual input changes. It is a practical property of explanation stability, not a statement about model accuracy or prediction quality.

For governance, the key question is whether the explanation remains materially similar under reasonable baseline choices. If it does not, the explanation may be too dependent on an arbitrary starting point to support audits, reviews, or user-facing decisions.

Why Baseline Choice Matters

Baseline selection can change what an explanation appears to highlight. In attribution-style methods, for example, different references can shift importance across features even when the underlying model output is unchanged. That means two valid runs can produce different stories about the same decision.

This is why baseline sensitivity is often treated as a robustness concern. A low-sensitivity explanation is easier to compare across reviews, while a high-sensitivity explanation can be misleading if readers assume the explanation is more stable than it really is.

Teams often discover that the issue is not the explanation method alone, but the reference policy behind it. A baseline should be chosen with the same care as the explanation technique itself, because the reference point is part of the result.

Where Baseline Sensitivity Breaks Down

Baseline sensitivity becomes a problem when explanations are used as evidence of fairness, compliance, or operational correctness. If the same case produces materially different explanations under different counterfactuals, reviewers may overstate confidence in the explanation and understate uncertainty.

It also creates comparability problems. A high-sensitivity explanation may be valid for one input but not useful as a general interpretation method, because the narrative depends too heavily on a particular reference choice. The CIS Benchmarks are a useful reminder that stable security decisions usually depend on clearly defined baselines, not ad hoc ones.

In operational settings, unstable explanations can frustrate incident review, model validation, and user trust. If the explanation changes materially with small baseline changes, the organisation should treat it as a signal to examine explanation design, not as a minor presentation issue.

How to Interpret It in Governance and Review

Baseline sensitivity should be read as a reliability check on the explanation layer. It does not automatically invalidate the model, but it does indicate that interpretation may depend on choices that are invisible to most readers.

Good governance practice is to document which reference points are used, why they were chosen, and how sensitive the explanation is to reasonable alternatives. That makes the explanation easier to compare, challenge, and reproduce during review. For organisations that already rely on control-oriented baselines, the idea is consistent with how the NIST Cybersecurity Framework 2.0 treats repeatable, governed processes as part of trustworthy operations.

When explanation stability matters more than novelty, teams should prefer simpler or better-normalised explanation setups over more impressive but fragile ones. The practical goal is not to eliminate all sensitivity, but to keep it within a range where the explanation still supports decision-making.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

CIS Controls v8, NIST CSF 2.0 and NIST SP 800-53 Rev 5 set the governance and control requirements practitioners need to meet.

FrameworkControl / ReferenceRelevance
CIS Controls v8CIS-5 — Account ManagementBaseline sensitivity is a control-governed review concern.
Recommendation — Use CIS-5 to standardise the review baseline and document who can change explanation settings.
NIST CSF 2.0GV.OV-01 — Oversight of OutcomesStable explanations support governed oversight of decision outcomes.
Recommendation — Apply GV.OV-01 to review whether explanation outputs remain stable enough for governance use.
NIST SP 800-53 Rev 5AU-6 — Audit Record Review, Analysis, and ReportingExplanation stability affects whether audit review can rely on consistent evidence.
Recommendation — Use AU-6 to review explanation outputs for consistency and investigate material variation.

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.

NHIMG Editorial Note
Reviewed and updated by the NHIMG editorial team on October 12, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org