Evidence-Based Access Risk Rating For AI