Establish and maintain risk management roles
How establish and maintain risk management roles are reshaped as AGI capability advances.
The bottom line
Roughly 85% of the work in Establish and maintain risk management roles is information-shaped — already within reach of AI delivery. The question here is not whether it shifts, but which tasks go first and who staffs the residual.
Why: With no child occupations seeded, the scalar relies entirely on the APQC process name, description, and lens. The process falls under the top-level category 'Develop and manage IT resilience and risk' and involves defining roles and escalation structures for IT risk management. This is pure administrative, governance, and organizational knowledge work, placing it firmly in the digital band.
grounded in the economy graph · digital scalar 0.85 · digital
Related articles
No articles yet for this entity.
Recent capability events
No capability events for this entity yet.
How the work flows
Trigger: A change in IT organizational structure, the emergence of new risk domains, or a mandate to formalize IT risk governance initiates the process.
- Identify IT risk areas requiring specialized oversight
- Define risk management roles and responsibilities
- Establish the risk escalation and reporting structure
- Assign qualified personnel to the defined roles
- Communicate the risk governance framework to stakeholders
- Review and adjust roles to address evolving IT risks
Outcome: Specialized IT risk management roles are fully defined, assigned to personnel, and integrated into a formal escalation structure.