Identify and evaluate IT risk
How identify and evaluate it risk are reshaped as AGI capability advances.
The bottom line
Roughly 90% of the work in Identify and evaluate IT risk is information-shaped — already within reach of AI delivery. The question here is not whether it shifts, but which tasks go first and who staffs the residual.
Why: With no child occupations seeded, this scalar is derived directly from the PCF category lens 'Develop and manage IT resilience and risk' and the process description. The work focuses on developing continuous processes to 'identify and evaluate' threats to IT operations, which represents pure analytical information transformation and knowledge work, placing it firmly in the high digital band.
grounded in the economy graph · digital scalar 0.90 · digital
Related articles
No articles yet for this entity.
Recent capability events
No capability events for this entity yet.
How the work flows
Trigger: A scheduled IT risk assessment cycle begins or a significant change is proposed to the IT infrastructure.
- Scan IT environment and project portfolios for emerging threats
- Catalog identified vulnerabilities in a centralized risk register
- Evaluate the probability of occurrence for each identified risk
- Assess the potential business and operational impact of realized risks
- Prioritize risks based on combined severity scores
Outcome: Identified IT risks are cataloged, scored for potential impact and likelihood, and prioritized for mitigation.