Risk tier
In short: A risk tier is a label that groups agents or actions by potential harm, such as low, medium and high. Tiers decide which controls apply: a high tier might need human approval, shorter credentials and more frequent access reviews. Tiers keep governance effort in proportion to real risk.
Which controls use this term?
- GOV-07Human approval for high-risk actions. Route actions above a defined risk threshold to a named human approver, and block them until that person approves.
- GOV-03Documented purpose. Write down what each agent is for, which tasks it may perform and which data it needs, before it gets access.
Which terms are related?
Purpose statement, Allow ask deny, Human in the loop, Human oversight, High-risk action, AI Act.
Reviewed by The Register desk