Processes
What will AGI do for Establish and publish security and controls guidelines?
Without seeded child occupations, the evaluation relies on the process name, 'Establish and publish security and controls guidelines'. This describes pure knowledge work—analyzing risks, drafting policies, and publishing documentation. Because the work consists entirely of information transformation and document creation, it sits firmly in the digital band.
A regulatory update, emerging cyber threat, or scheduled compliance review requires the creation or revision of security policies.