Risk Categories

Last updated: November 12, 2025

This article outlines the main categories used within Mycroft to help classify, and manage risk. Each category groups similar risk types to ensure consistent evaluation and reporting.


Below is a table to break down each category in detail..

Risk Categories

Description

Operational

Operational risk refers to the potential for losses resulting from inadequate or failed internal processes, people, and systems, or from external events. This category encompasses a wide range of risks that can disrupt an organization's day-to-day operations.

Reputational

Reputational risk is the potential for negative public perception or loss of trust to damage an organization's brand, image, or credibility.

Technical

Technical risk relates to the potential for failures or issues in technology, systems, or processes that an organization relies on.

Fraud

Fraud risk involves the potential for intentional deception or misrepresentation for personal or financial gain at the expense of the organization.

AI

AI risk refers to the potential negative consequences and challenges associated with the development, deployment, and use of artificial intelligence systems.

Each risk identified in the system should be mapped to one or more of these categories to support effective monitoring and mitigation planning.

Screenshot 2025-11-10 at 10.07.28 AM.png