Determine critical IT risks
How determine critical it risks are reshaped as AGI capability advances.
The bottom line
Roughly 85% of the work in Determine critical IT risks is information-shaped — already within reach of AI delivery. The question here is not whether it shifts, but which tasks go first and who staffs the residual.
Why: With no child occupations seeded, this scalar is derived entirely from the process lens ('Develop and manage IT resilience and risk') and its name/description ('Determining risks that could disrupt objectives of IT'). Assessing vulnerabilities and evaluating IT infrastructure objectives is purely analytical knowledge work that occurs strictly within digital and conceptual information environments, placing it firmly in the digital band.
grounded in the economy graph · digital scalar 0.85 · digital
Related articles
No articles yet for this entity.
Recent capability events
No capability events for this entity yet.
How the work flows
Trigger: A scheduled risk assessment cycle or a significant change to the organization's technology environment initiates the evaluation.
- Inventory critical IT assets and systems
- Gather internal and external threat intelligence
- Identify vulnerabilities and existing control gaps
- Assess likelihood and potential business impact of each risk
- Score and prioritize risks using a standardized risk matrix
- Document and publish findings in the IT risk register
Outcome: A prioritized register of critical IT risks is finalized and ready for mitigation planning.