The board question
What can the agent read, write, delete, send, execute, approve, retrieve, or remember, and what artifacts support management's answer?
Resource
Questions to ask about an AI agent's permissions.
A concise board briefing resource for explaining what an AI agent can do, what controls matter, and how the organization supports its answer.
Overview
What this resource covers.
- Agent permissions and controls
- Board questions
- Actions the agent can take
- Supporting records to request from management
- Launch options
- Editable risk matrix, owner register, and local JSON/SVG/print exports
What you receive
One-page board briefing
Use these questions to discuss agent permissions, approval controls and launch conditions with management.
Launch options
Proceed, pilot-only, or pause pending controls. Tie the answer to authority, approvals, logging, rollback, and customer impact.
Records to request
Show tool inventory, data classes, approval gates, incident rollback path, and the most recent abuse-case test results.
01
Core question
What can the agent read, change, send, delete, execute, approve, retrieve or remember, and which records support those answers?
02
Turn the discussion into a report
Use the AI Risk Briefing Builder to describe the system, rate risks with an explicit basis, name owners, and record the decisions leadership needs to make. Preview the matrix and decision register, then export JSON, a presentation SVG, or a printed report. An optional redaction switch removes all entered text and dates from those outputs. Ratings are ordinal judgments; the tool does not measure probability or predict financial loss.
Next step