MediumDisplacement●Realized

Workforce displacement

Description

Automation of knowledge work displaces roles without reskilling or transition planning.

Example scenario

Large-scale automation of a back-office function proceeds with no transition plan.

Real-world evidence●Realized

Deepfake-enabled financial fraud has moved from research demonstration to confirmed large-scale production incidents, with documented cases of attackers using AI-generated video and voice to impersonate executives and authorize fraudulent wire transfers, resulting in confirmed financial losses.

Hong Kong Finance Worker Tricked by Deepfake CFO Video Call into $25M TransferHong Kong Police / CNN · 2024 UK Energy Firm CEO Voice Cloned by AI in Fraudulent Wire TransferWall Street Journal · 2019

Primary mitigations

Workforce impact assessment
reskilling programmes
human-augmentation framing
phased adoption.

Detection signals

Role-impact tracking; reskilling-uptake metrics.

Mitigating controls

Non-agentic controls

ZYC-OREL-001Non-Agentic

Inference with Human Oversight Rate

Over-reliance

ZYC-ETH-001Non-Agentic

Non-Maleficence

Ethical Governance

ZYC-ACCT-001Non-Agentic

Human-in-the-Loop

Accountability & Oversight

Risk scoring

Severity

Medium

score 2

Likelihood

Medium

score 2

Risk

Medium

Control depth

3 mapped (below avg 5.2)

Framework refs

3/8 taxonomies

Framework mappings

Regulatory5/5

EU AI Act: Art. 5(1)(a) (Prohibition on AI systems using subliminal or purposefully manipulative techniques — covers AI-generated social engineering at scale); Art. 5(1)(b) (Prohibition on AI exploiting psychological vulnerabilities); Art. 50(2)-(3) (Transparency obligations for AI-generated deepfake content used in identity fraud)
DORA: Art. 9 (Protection and prevention — financial entities must implement security controls against cyber threats including AI-enabled social engineering and fraud); Art. 10 (Detection — monitoring for anomalous activity including AI-generated phishing and deepfake-based account takeover)
RBI: Societal Impact
NIST AI RMF: MAP 5.1
ISO/IEC 42001: Clause 6.1.1

Risk taxonomies3/4

MIT AI Risk Repository: Domain 6 – Socioeconomic
IBM AI Risk Atlas: Societal impact
NIST ARIA: Value Chain & Component Integration
MAESTRO: — Not mapped

Security0/4

OWASP: — Not covered by OWASP LLM 2025
MITRE ATLAS: — Not covered by MITRE ATLAS
Cisco AI Risk: — Not covered by Cisco AI Defense
Palo Alto AI Risk: — Not covered by Palo Alto Prisma AIRS

Capability‑pattern applicability

Classification

GenAI‑specific

Capability pattern

Chat

Pattern scope

Pattern-agnostic (GenAI)

Why

Generative-AI risk realised without agency/tool-use — applies to chat, RAG, summarization, classification, and content-generation deployments.

Ownership & threshold

Owner (RACI)

AI Governance Office [A]

Threshold

Programme KRI within board-approved tolerance

Inherent vs residual

Inherent

Medium

Residual

2.4

Low

Mapped controls: 3
Assumed control effectiveness: 40%

Modeled, not measured — design-stage; controls not yet tested (reduction capped 40%). Residual applies a uniform assumed reduction to the inherent score; it is not evidence of tested control performance.

Related risks in Societal & Economic

ZNR-SE-001High

Over-reliance / automation bias

ZNR-SE-003Medium

Environmental / compute & energy cost

ZNR-SE-004Medium

Erosion of human skill / deskilling

ZNR-SE-005Medium

Accessibility & digital-divide exclusion

Search the Atlas

Workforce displacement

Description

Primary mitigations

Detection signals

Mitigating controls

Related risks in Societal & Economic