[{"initiative_id":"ARA-261031-079D53","source_app":"ara","capability":"risk_analyst","finding_id":"R-01","finding_type":"risk","title":"Agent disables critical accounts or servers","description":"False positive leads to isolation of production systems.","severity":"Critical","likelihood":"Likely","impact":"Severe","confidence":"ai_inferred","regulations_cited":[]},{"initiative_id":"ARA-261031-079D53","source_app":"ara","capability":"risk_analyst","finding_id":"R-02","finding_type":"risk","title":"Attacker triggers the agent against the organisation","description":"Crafted alerts make the agent lock out administrators.","severity":"Critical","likelihood":"Possible","impact":"Severe","confidence":"ai_inferred","regulations_cited":[]},{"initiative_id":"ARA-261031-079D53","source_app":"ara","capability":"risk_analyst","finding_id":"R-03","finding_type":"risk","title":"No audit trail of agent reasoning","description":"Actions cannot be explained afterwards.","severity":"Medium","likelihood":"Possible","impact":"Moderate","confidence":"ai_inferred","regulations_cited":[]},{"initiative_id":"ARA-261031-079D53","source_app":"ara","capability":"compliance_analyst","finding_id":"CMP-01","finding_type":"gap","title":"APRA CPS 234 Information Security (Australia) - potentially_applicable","description":"Applies to APRA-regulated entities; incident response is in scope.","severity":"Medium","confidence":"ai_inferred","regulations_cited":["APRA CPS 234 Information Security"],"policy_questions":["What does APRA CPS 234 Information Security require for this scenario?"],"source_url":null},{"initiative_id":"ARA-261031-079D53","source_app":"ara","capability":"compliance_analyst","finding_id":"CMP-02","finding_type":"gap","title":"APRA CPS 230 Operational Risk Management (Australia) - potentially_applicable","description":"Agent errors could disrupt critical operations.","severity":"Medium","confidence":"ai_inferred","regulations_cited":["APRA CPS 230 Operational Risk Management"],"policy_questions":["What does APRA CPS 230 Operational Risk Management require for this scenario?"],"source_url":"https://www.apra.gov.au/operational-risk-management"},{"initiative_id":"ARA-261031-079D53","source_app":"ara","capability":"security_analyst","finding_id":"T-01","finding_type":"risk","title":"Alert injection steering agent actions","description":"Attacker writes instructions into fields that reach the LLM.","severity":"Critical","likelihood":"Possible","impact":"Severe","confidence":"ai_inferred"},{"initiative_id":"ARA-261031-079D53","source_app":"ara","capability":"security_analyst","finding_id":"T-02","finding_type":"risk","title":"Compromise of agent credentials","description":"Agent holds powerful API tokens.","severity":"High","likelihood":"Unlikely","impact":"Severe","confidence":"ai_inferred"},{"initiative_id":"ARA-261031-079D53","source_app":"ara","capability":"control_analyst","finding_id":"C-01","finding_type":"control","title":"Operating envelope with tiered autonomy","description":"Autonomous only for low-impact actions; human approval for account disablement and critical assets.","severity":"High","confidence":"ai_inferred","controls_addressing":["R-01","R-02"]},{"initiative_id":"ARA-261031-079D53","source_app":"ara","capability":"control_analyst","finding_id":"C-02","finding_type":"control","title":"Protected asset list and kill switch","description":"The agent cannot act on listed critical assets; one action stops the agent.","severity":"High","confidence":"ai_inferred","controls_addressing":["R-01","R-02"]},{"initiative_id":"ARA-261031-079D53","source_app":"ara","capability":"control_analyst","finding_id":"C-03","finding_type":"control","title":"Action and reasoning audit log","description":"Record inputs, reasoning summary and actions for every decision.","severity":"Medium","confidence":"ai_inferred","controls_addressing":["R-03"]}]