Establish IT risk tolerance
How establish it risk tolerance are reshaped as AGI capability advances.
The bottom line
Roughly 85% of the work in Establish IT risk tolerance is information-shaped — already within reach of AI delivery. The question here is not whether it shifts, but which tasks go first and who staffs the residual.
Why: With no child occupations seeded, the scalar is derived entirely from the PCF lens ('Develop and manage IT resilience and risk') and process description. Determining quantitative maximum risk for strategic, financial, and compliance categories is pure knowledge work, consisting of data analysis, policy drafting, and strategic modeling, placing it firmly in the digital band.
grounded in the economy graph · digital scalar 0.85 · digital
Related articles
No articles yet for this entity.
Recent capability events
No capability events for this entity yet.
How the work flows
Trigger: An annual IT governance review cycle begins or a significant shift occurs in the organization's business strategy or regulatory environment.
- Review enterprise risk policies and strategic business objectives
- Identify specific IT risk sub-categories
- Model and quantify potential impact scenarios for identified IT risks
- Define maximum acceptable loss limits and baseline risk thresholds
- Present proposed IT risk tolerance metrics to executive leadership
- Document and publish the formally approved IT risk tolerance levels
Outcome: Quantitative IT risk tolerance thresholds are formally approved and documented for strategic, operational, financial, and compliance categories.