Baseline sensitivity is the degree to which an explanation changes when the reference point or counterfactual input changes. High sensitivity means the explanation may be unstable, which reduces its value for governance, audit, and user-facing decisions.
What Baseline Sensitivity Means in Practice
Baseline sensitivity describes how much an explanation changes when the reference point, comparison set, or counterfactual input changes. It is a practical property of explanation stability, not a statement about model accuracy or prediction quality.
For governance, the key question is whether the explanation remains materially similar under reasonable baseline choices. If it does not, the explanation may be too dependent on an arbitrary starting point to support audits, reviews, or user-facing decisions.
Why Baseline Choice Matters
Baseline selection can change what an explanation appears to highlight. In attribution-style methods, for example, different references can shift importance across features even when the underlying model output is unchanged. That means two valid runs can produce different stories about the same decision.
This is why baseline sensitivity is often treated as a robustness concern. A low-sensitivity explanation is easier to compare across reviews, while a high-sensitivity explanation can be misleading if readers assume the explanation is more stable than it really is.
Teams often discover that the issue is not the explanation method alone, but the reference policy behind it. A baseline should be chosen with the same care as the explanation technique itself, because the reference point is part of the result.
Where Baseline Sensitivity Breaks Down
Baseline sensitivity becomes a problem when explanations are used as evidence of fairness, compliance, or operational correctness. If the same case produces materially different explanations under different counterfactuals, reviewers may overstate confidence in the explanation and understate uncertainty.
It also creates comparability problems. A high-sensitivity explanation may be valid for one input but not useful as a general interpretation method, because the narrative depends too heavily on a particular reference choice. The CIS Benchmarks are a useful reminder that stable security decisions usually depend on clearly defined baselines, not ad hoc ones.
In operational settings, unstable explanations can frustrate incident review, model validation, and user trust. If the explanation changes materially with small baseline changes, the organisation should treat it as a signal to examine explanation design, not as a minor presentation issue.
How to Interpret It in Governance and Review
Baseline sensitivity should be read as a reliability check on the explanation layer. It does not automatically invalidate the model, but it does indicate that interpretation may depend on choices that are invisible to most readers.
Good governance practice is to document which reference points are used, why they were chosen, and how sensitive the explanation is to reasonable alternatives. That makes the explanation easier to compare, challenge, and reproduce during review. For organisations that already rely on control-oriented baselines, the idea is consistent with how the NIST Cybersecurity Framework 2.0 treats repeatable, governed processes as part of trustworthy operations.
When explanation stability matters more than novelty, teams should prefer simpler or better-normalised explanation setups over more impressive but fragile ones. The practical goal is not to eliminate all sensitivity, but to keep it within a range where the explanation still supports decision-making.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
CIS Controls v8, NIST CSF 2.0 and NIST SP 800-53 Rev 5 set the governance and control requirements practitioners need to meet.
| Framework | Control / Reference | Relevance |
|---|---|---|
| CIS Controls v8 | CIS-5 — Account Management | Baseline sensitivity is a control-governed review concern. |
| Recommendation — Use CIS-5 to standardise the review baseline and document who can change explanation settings. | ||
| NIST CSF 2.0 | GV.OV-01 — Oversight of Outcomes | Stable explanations support governed oversight of decision outcomes. |
| Recommendation — Apply GV.OV-01 to review whether explanation outputs remain stable enough for governance use. | ||
| NIST SP 800-53 Rev 5 | AU-6 — Audit Record Review, Analysis, and Reporting | Explanation stability affects whether audit review can rely on consistent evidence. |
| Recommendation — Use AU-6 to review explanation outputs for consistency and investigate material variation. | ||
Related resources from NHI Mgmt Group
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on October 12, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org