Identify Risks and Guardrails for an Agentforce Project
Autonomous AI agents come with risks, such as security threats, data breaches,
reputational harm, financial loss, bias, hallucinations, and issues with transparency and
accountability. When planning an AI agent, identify risks for your Agentforce use case and plan
risk mitigation strategies.
As you approach conversations in your organization about AI risk, you can use the
People, Business, Technology, and Data framework. These categories and considerations can help
you come up with possible risks and concerns related to your Agentforce project.
Category
Considerations
People
Empowerment: Roles and responsibilities, hiring, training, and upskilling
Culture and practice: Human-centered AI design, change management, adoption
Business
Value: Benefits, objectives, KPI, and metrics
Operations: Org structure, capability management, processes and workflows, AI
governance, DevOps strategy
Technology
AI tooling: AI infrastructure, applications, APIs, prompts, security
safeguards
AI models: Model selection, training considerations, management, cost
Data
Quality: Fit for use, accuracy, completeness, accessibility, recency, and
more
Strategy: Data management, infrastructure, governance, analytics
Use this framework to discuss concerns related to your Agentforce use case. Your project
stakeholders can brainstorm potential risks for each category.
After cataloging the risks and concerns, come up with mitigation strategies for each risk.
Some of the mitigation strategies will translate into agent guardrails in Agentforce. When
you’re done with the risk mitigation exercise, document the risks and guardrails for your
use case. Capturing risk mitigation activities is important for regulatory compliance and
useful for internal audits.
To see an example of risks and guardrails for an Agentforce project, complete the Define the Agent Guardrails unit on Trailhead.
We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required Cookies
Always Active
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional Cookies
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising Cookies
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.