# SPM-009: Risk-score AI tools, connectors and agent workflows


- Area: AI Security Posture Management

- Verification: Walkthrough
- OWASP adoption tier: AT0–AT2
- Formerly: DIS-009
- URL: /r/SPM-009

**Acceptance criteria:** Configurable factors such as vendor location, training on inputs, trust-center availability, account tier, autonomy, data sensitivity and tool power.

**Why it matters:** The risk in an AI tool usually sits in its data-handling terms, which change without the domain changing.

**How to verify:** Risk scores, with sources and factors, for five tools.

**OWASP adoption context:** Risk scoring spans ordinary employee AI and MCP-extended workflows because sensitivity, autonomy and tool power vary independently of approval status.

**Mappings:**
- NIST CSF 2.0: GV.RM-06, ID.RA-05 — Configurable risk factors can support a repeatable method for documenting and prioritizing inherent risk. The buyer must still define the method and connect scores to threats, likelihood, impact and response decisions.
- NIST AI RMF: MAP 5.1 — Sensitivity, autonomy and tool-power factors can inform the likelihood and magnitude of impacts. A product score does not by itself document the full range of beneficial and harmful impacts.
- OWASP ASI: ASI04 — Scoring connectors and agent workflows helps prioritize review of runtime-fetched tools and components exposed to agentic supply-chain risk. Scores do not verify component integrity.
- SOC 2: CC3.2, CC9.2 — The configurable factors provide an AI risk-analysis step and inputs to repeat assessments and supplier due diligence. Risk criteria, likelihood, impact, ownership, acceptance and treatment remain the buyer’s responsibilities; a trust center is not assurance.
- ISO 27001: Cl. 6.1.2, A.5.19 — Security-relevant scoring factors supply risk-analysis inputs; external-vendor factors also support supplier due diligence. The buyer must define risk criteria, likelihood, impact, ownership, acceptance and treatment. A score or vendor trust center is not a complete assessment or assurance; the supplier link applies only to external relationships.
- ISO 42001: Cl. 6.1.2, Cl. 8.2, A.10.3 — ISO/IEC 42001: Validated tool and workflow risk factors provide inputs to the defined AI risk-assessment process and periodic or change-driven reassessments. A score does not establish a complete assessment, risk acceptance, treatment plan or assessment of effects on people or society. Supplier-specific factors, such as provider use of inputs and account terms, can also inform a defined responsible-AI supplier review; this supplier link applies only to external suppliers and validated evidence.