OWASP Agentic Top 10 Fundamentals: sample practice worksheet

Fictional practice only. Use invented details; do not enter personal, client or confidential data.
This preview is not a completed assessment, legal opinion, audit or certification.

Exercise: Practical Exercise: A Refund Agent Review
Assess a fictional agent that reads messages and issues refunds. Identify risks across the current Top 10, select safeguards and draft release conditions and evidence requirements.

1. Describe the fictional organisation, process or system and its scope.

2. Identify three relevant risks or obligations. For each, record a control, owner and evidence you would request.

3. List assumptions, gaps and two questions to ask before relying on the result.

4. Propose one next action and explain how you would check that it worked.

Learning takeaway: An agent trust-boundary map and risk-to-safeguard review checklist.

Participants receive an Orbix Certificate of Completion upon full attendance. This introductory course does not confer professional certification or establish an organisation's compliance. Further implementation and assessment depend on the organisation's scope and obligations.

Programme: https://orbixtech.my/training-owasp-agentic-top-10-fundamentals-malaysia