Processes
What will AGI do for Establish and maintain risk management roles?
With no child occupations seeded, the scalar relies entirely on the APQC process name, description, and lens. The process falls under the top-level category 'Develop and manage IT resilience and risk' and involves defining roles and escalation structures for IT risk management. This is pure administrative, governance, and organizational knowledge work, placing it firmly in the digital band.
A change in IT organizational structure, the emergence of new risk domains, or a mandate to formalize IT risk governance initiates the process.