{"id":"SPM-009","section":"AI Security Posture Management","requirement":"Risk-score AI tools, connectors and agent workflows","acceptance":"Configurable factors such as vendor location, training on inputs, trust-center availability, account tier, autonomy, data sensitivity and tool power.","tier":"AT0–AT2","whyItMatters":"The risk in an AI tool usually sits in its data-handling terms, which change without the domain changing.","verificationMethod":"W","verificationTest":"Risk scores, with sources and factors, for five tools.","formerly":"DIS-009","alsoIn":[],"sort":8,"adoptionContext":"Risk scoring spans ordinary employee AI and MCP-extended workflows because sensitivity, autonomy and tool power vary independently of approval status.","mappings":[{"frameworks":["csf"],"explanation":"Configurable risk factors can support a repeatable method for documenting and prioritizing inherent risk. The buyer must still define the method and connect scores to threats, likelihood, impact and response decisions.","kind":"framework","references":{"csf":["GV.RM-06","ID.RA-05"]},"relation":null,"conditions":[]},{"frameworks":["rmf"],"explanation":"Sensitivity, autonomy and tool-power factors can inform the likelihood and magnitude of impacts. A product score does not by itself document the full range of beneficial and harmful impacts.","kind":"framework","references":{"rmf":["MAP 5.1"]},"relation":null,"conditions":[]},{"frameworks":["owasp"],"explanation":"Scoring connectors and agent workflows helps prioritize review of runtime-fetched tools and components exposed to agentic supply-chain risk. Scores do not verify component integrity.","kind":"framework","references":{"owasp":["ASI04"]},"relation":null,"conditions":[]},{"frameworks":["soc2"],"explanation":"The configurable factors provide an AI risk-analysis step and inputs to repeat assessments and supplier due diligence. Risk criteria, likelihood, impact, ownership, acceptance and treatment remain the buyer’s responsibilities; a trust center is not assurance.","kind":"framework","references":{"soc2":["CC3.2","CC9.2"]},"relation":null,"conditions":[]},{"frameworks":["iso27001"],"explanation":"Security-relevant scoring factors supply risk-analysis inputs; external-vendor factors also support supplier due diligence. The buyer must define risk criteria, likelihood, impact, ownership, acceptance and treatment. A score or vendor trust center is not a complete assessment or assurance; the supplier link applies only to external relationships.","kind":"framework","references":{"iso27001":["Cl. 6.1.2","A.5.19"]},"relation":null,"conditions":[]},{"frameworks":["iso"],"explanation":"ISO/IEC 42001: Validated tool and workflow risk factors provide inputs to the defined AI risk-assessment process and periodic or change-driven reassessments. A score does not establish a complete assessment, risk acceptance, treatment plan or assessment of effects on people or society. Supplier-specific factors, such as provider use of inputs and account terms, can also inform a defined responsible-AI supplier review; this supplier link applies only to external suppliers and validated evidence.","kind":"framework","references":{"iso":["Cl. 6.1.2","Cl. 8.2","A.10.3"]},"relation":null,"conditions":[]}],"area":"AI Security Posture Management","areaSlug":"SPM","url":"/r/SPM-009","frameworkRefs":{"ISO27001":["Cl. 6.1.2","A.5.19"],"ISO42001":["Cl. 6.1.2","Cl. 8.2","A.10.3"],"NIST-CSF":["GV.RM-06","ID.RA-05"],"NIST-AI-RMF":["MAP 5.1"],"SOC2":["CC3.2","CC9.2"],"OWASP-ASI":["ASI04"]}}