Processes
What will AGI do for Establish mitigation approaches for IT risks?
With no child occupations seeded, the evaluation relies on the APQC lens prior ('Develop and manage IT resilience and risk') and the process description. Establishing mitigation approaches for IT threats involves strategic analysis, policy drafting, and system planning—activities that are fundamentally information-based. Because IT risk management falls squarely within the highly digital IT management domain, this process is pure digital knowledge work.
An IT risk assessment identifies a vulnerability or threat that exceeds the organization's acceptable risk tolerance.