Business outcomeOperational Impact
The agent disrupts workflows, performs incorrect actions, or affects business continuity.
Typical questions
- What business process could be affected?
- Who is accountable for the action?
- What evidence would prove what happened?
- Which controls reduce the blast radius?
Business outcomeFinancial Impact
The agent causes loss through fraud, unauthorized transactions, resource abuse, or service disruption.
Typical questions
- What business process could be affected?
- Who is accountable for the action?
- What evidence would prove what happened?
- Which controls reduce the blast radius?
Business outcomeRegulatory Impact
The agent mishandles data or actions in ways that create audit, privacy, safety, or compliance exposure.
Typical questions
- What business process could be affected?
- Who is accountable for the action?
- What evidence would prove what happened?
- Which controls reduce the blast radius?
Business outcomeReputation Impact
The incident damages customer, partner, regulator, or employee trust.
Typical questions
- What business process could be affected?
- Who is accountable for the action?
- What evidence would prove what happened?
- Which controls reduce the blast radius?
Business outcomeSafety Impact
The agent influences physical-world, clinical, operational, or safety-sensitive decisions.
Typical questions
- What business process could be affected?
- Who is accountable for the action?
- What evidence would prove what happened?
- Which controls reduce the blast radius?