AutomationFlowsAI & RAG › Assess Credential Risk and Route Mitigation Actions with Gpt-4o-mini

Assess Credential Risk and Route Mitigation Actions with Gpt-4o-mini

ByCheng Siong Chin @cschin on n8n.io

This workflow automates comprehensive enterprise risk assessment and mitigation planning for organizations managing complex operational, financial, and compliance risks. Designed for risk managers, internal audit teams, and executive leadership, it solves the challenge of…

Event trigger★★★★☆ complexityAI-powered27 nodesOpenAI ChatOutput Parser StructuredAgent ToolAgent
AI & RAG Trigger: Event Nodes: 27 Complexity: ★★★★☆ AI nodes: yes Added:

This workflow corresponds to n8n.io template #13331 — we link there as the canonical source.

This workflow follows the Agent → Agenttool recipe pattern — see all workflows that pair these two integrations.

The workflow JSON

Copy or download the full n8n JSON below. Paste it into a new n8n workflow, add your credentials, activate. Full import guide →

Download .json
{
  "id": "VXptdbu_aFWXcGZ4bc3F3",
  "name": "AI-powered enterprise risk assessment & mitigation planning system",
  "tags": [],
  "nodes": [
    {
      "id": "d785048f-fef9-4615-bda2-8dc1b167cfd0",
      "name": "Manual Trigger",
      "type": "n8n-nodes-base.manualTrigger",
      "position": [
        -1872,
        160
      ],
      "parameters": {},
      "typeVersion": 1
    },
    {
      "id": "7f51e2d6-ab3d-4007-abad-dca9bf8e7e96",
      "name": "Workflow Configuration",
      "type": "n8n-nodes-base.set",
      "position": [
        -1648,
        160
      ],
      "parameters": {
        "options": {},
        "assignments": {
          "assignments": [
            {
              "id": "id-1",
              "name": "validationThresholdScore",
              "type": "number",
              "value": 75
            },
            {
              "id": "id-2",
              "name": "verificationRequiredScore",
              "type": "number",
              "value": 60
            },
            {
              "id": "id-3",
              "name": "criticalRiskThreshold",
              "type": "number",
              "value": 80
            },
            {
              "id": "id-4",
              "name": "highRiskThreshold",
              "type": "number",
              "value": 60
            },
            {
              "id": "id-5",
              "name": "mediumRiskThreshold",
              "type": "number",
              "value": 40
            }
          ]
        },
        "includeOtherFields": true
      },
      "typeVersion": 3.4
    },
    {
      "id": "a926c066-2d6d-4acc-8670-daaf57937c4a",
      "name": "Generate Sample Credential Data",
      "type": "n8n-nodes-base.code",
      "position": [
        -1424,
        160
      ],
      "parameters": {
        "jsCode": "// Generate sample credential data with multiple records\nconst credentials = [\n  {\n    credentialId: \"CRED-001\",\n    credentialType: \"passport\",\n    holderName: \"John Smith\",\n    issueDate: \"2020-03-15\",\n    expiryDate: \"2030-03-14\",\n    issuingAuthority: \"US Department of State\",\n    documentNumber: \"P123456789\",\n    verificationStatus: \"pending\",\n    metadata: {\n      country: \"United States\",\n      securityFeatures: [\"hologram\", \"biometric_chip\", \"watermark\"],\n      biometricData: {\n        fingerprint: true,\n        facialRecognition: true,\n        irisData: false\n      }\n    }\n  },\n  {\n    credentialId: \"CRED-002\",\n    credentialType: \"driver_license\",\n    holderName: \"Sarah Johnson\",\n    issueDate: \"2021-06-20\",\n    expiryDate: \"2025-06-19\",\n    issuingAuthority: \"California DMV\",\n    documentNumber: \"DL987654321\",\n    verificationStatus: \"verified\",\n    metadata: {\n      country: \"United States\",\n      securityFeatures: [\"barcode\", \"magnetic_stripe\", \"hologram\"],\n      biometricData: {\n        fingerprint: false,\n        facialRecognition: true,\n        irisData: false\n      }\n    }\n  },\n  {\n    credentialId: \"CRED-003\",\n    credentialType: \"national_id\",\n    holderName: \"Maria Garcia\",\n    issueDate: \"2019-11-10\",\n    expiryDate: \"2029-11-09\",\n    issuingAuthority: \"Spanish Ministry of Interior\",\n    documentNumber: \"NID456789123\",\n    verificationStatus: \"pending\",\n    metadata: {\n      country: \"Spain\",\n      securityFeatures: [\"rfid_chip\", \"hologram\", \"microprinting\"],\n      biometricData: {\n        fingerprint: true,\n        facialRecognition: true,\n        irisData: false\n      }\n    }\n  },\n  {\n    credentialId: \"CRED-004\",\n    credentialType: \"professional_certificate\",\n    holderName: \"Dr. Michael Chen\",\n    issueDate: \"2018-09-01\",\n    expiryDate: \"2024-08-31\",\n    issuingAuthority: \"Medical Board of California\",\n    documentNumber: \"MED789456123\",\n    verificationStatus: \"verified\",\n    metadata: {\n      country: \"United States\",\n      securityFeatures: [\"digital_signature\", \"qr_code\", \"watermark\"],\n      biometricData: {\n        fingerprint: false,\n        facialRecognition: false,\n        irisData: false\n      }\n    }\n  },\n  {\n    credentialId: \"CRED-005\",\n    credentialType: \"passport\",\n    holderName: \"Ahmed Hassan\",\n    issueDate: \"2022-01-15\",\n    expiryDate: \"2032-01-14\",\n    issuingAuthority: \"UAE Ministry of Foreign Affairs\",\n    documentNumber: \"P987123456\",\n    verificationStatus: \"rejected\",\n    metadata: {\n      country: \"United Arab Emirates\",\n      securityFeatures: [\"biometric_chip\", \"hologram\", \"uv_features\"],\n      biometricData: {\n        fingerprint: true,\n        facialRecognition: true,\n        irisData: true\n      }\n    }\n  },\n  {\n    credentialId: \"CRED-006\",\n    credentialType: \"driver_license\",\n    holderName: \"Emma Wilson\",\n    issueDate: \"2023-04-10\",\n    expiryDate: \"2028-04-09\",\n    issuingAuthority: \"UK Driver and Vehicle Licensing Agency\",\n    documentNumber: \"DL321654987\",\n    verificationStatus: \"pending\",\n    metadata: {\n      country: \"United Kingdom\",\n      securityFeatures: [\"hologram\", \"microtext\", \"color_shifting_ink\"],\n      biometricData: {\n        fingerprint: false,\n        facialRecognition: true,\n        irisData: false\n      }\n    }\n  }\n];\n\n// Return the credentials as items\nreturn credentials.map(credential => ({ json: credential }));"
      },
      "typeVersion": 2
    },
    {
      "id": "e5525c74-12b5-484a-9449-55aff30f7d16",
      "name": "OpenAI Model - Coordination Agent",
      "type": "@n8n/n8n-nodes-langchain.lmChatOpenAi",
      "position": [
        -1200,
        384
      ],
      "parameters": {
        "model": {
          "__rl": true,
          "mode": "list",
          "value": "gpt-4o-mini"
        },
        "options": {},
        "builtInTools": {}
      },
      "credentials": {
        "openAiApi": {
          "name": "<your credential>"
        }
      },
      "typeVersion": 1.3
    },
    {
      "id": "57c918a1-c342-49d6-8ba7-837799165960",
      "name": "OpenAI Model - Validation Agent",
      "type": "@n8n/n8n-nodes-langchain.lmChatOpenAi",
      "position": [
        -1104,
        592
      ],
      "parameters": {
        "model": {
          "__rl": true,
          "mode": "list",
          "value": "gpt-4o-mini"
        },
        "options": {},
        "builtInTools": {}
      },
      "credentials": {
        "openAiApi": {
          "name": "<your credential>"
        }
      },
      "typeVersion": 1.3
    },
    {
      "id": "c9f11c5f-7de6-43fb-9a4a-2c7203fca3b6",
      "name": "OpenAI Model - Verification Agent",
      "type": "@n8n/n8n-nodes-langchain.lmChatOpenAi",
      "position": [
        -784,
        592
      ],
      "parameters": {
        "model": {
          "__rl": true,
          "mode": "list",
          "value": "gpt-4o-mini"
        },
        "options": {},
        "builtInTools": {}
      },
      "credentials": {
        "openAiApi": {
          "name": "<your credential>"
        }
      },
      "typeVersion": 1.3
    },
    {
      "id": "6896146c-624b-4a58-acea-9279204a24dd",
      "name": "OpenAI Model - Risk Assessment Agent",
      "type": "@n8n/n8n-nodes-langchain.lmChatOpenAi",
      "position": [
        -448,
        592
      ],
      "parameters": {
        "model": {
          "__rl": true,
          "mode": "list",
          "value": "gpt-4o-mini"
        },
        "options": {},
        "builtInTools": {}
      },
      "credentials": {
        "openAiApi": {
          "name": "<your credential>"
        }
      },
      "typeVersion": 1.3
    },
    {
      "id": "0c36e736-1cd1-456a-b8ec-971b74a87b95",
      "name": "Validation Output Parser",
      "type": "@n8n/n8n-nodes-langchain.outputParserStructured",
      "position": [
        -944,
        592
      ],
      "parameters": {
        "schemaType": "manual",
        "inputSchema": "{\n  \"type\": \"object\",\n  \"properties\": {\n    \"credentialId\": {\n      \"type\": \"string\"\n    },\n    \"isValid\": {\n      \"type\": \"boolean\"\n    },\n    \"validationScore\": {\n      \"type\": \"number\",\n      \"minimum\": 0,\n      \"maximum\": 100\n    },\n    \"issues\": {\n      \"type\": \"array\",\n      \"items\": {\n        \"type\": \"object\",\n        \"properties\": {\n          \"severity\": {\n            \"type\": \"string\"\n          },\n          \"description\": {\n            \"type\": \"string\"\n          }\n        }\n      }\n    },\n    \"dataIntegrityCheck\": {\n      \"type\": \"boolean\"\n    },\n    \"formatCompliance\": {\n      \"type\": \"boolean\"\n    },\n    \"expiryStatus\": {\n      \"type\": \"string\",\n      \"enum\": [\"valid\", \"expired\", \"expiring_soon\"]\n    },\n    \"securityFeaturesVerified\": {\n      \"type\": \"boolean\"\n    },\n    \"reasoning\": {\n      \"type\": \"string\"\n    }\n  }\n}"
      },
      "typeVersion": 1.3
    },
    {
      "id": "927bead7-11b2-4591-9efd-e6c15daeaf02",
      "name": "Verification Output Parser",
      "type": "@n8n/n8n-nodes-langchain.outputParserStructured",
      "position": [
        -624,
        592
      ],
      "parameters": {
        "schemaType": "manual",
        "inputSchema": "{\n\t\"type\": \"object\",\n\t\"properties\": {\n\t\t\"credentialId\": {\n\t\t\t\"type\": \"string\",\n\t\t\t\"description\": \"Unique identifier for the credential being verified\"\n\t\t},\n\t\t\"verificationStatus\": {\n\t\t\t\"type\": \"string\",\n\t\t\t\"enum\": [\"verified\", \"failed\", \"pending_review\"],\n\t\t\t\"description\": \"Overall verification status of the credential\"\n\t\t},\n\t\t\"verificationScore\": {\n\t\t\t\"type\": \"number\",\n\t\t\t\"minimum\": 0,\n\t\t\t\"maximum\": 100,\n\t\t\t\"description\": \"Numerical score representing verification confidence (0-100)\"\n\t\t},\n\t\t\"crossReferenceResults\": {\n\t\t\t\"type\": \"object\",\n\t\t\t\"properties\": {\n\t\t\t\t\"databaseMatch\": {\n\t\t\t\t\t\"type\": \"boolean\",\n\t\t\t\t\t\"description\": \"Whether credential matches database records\"\n\t\t\t\t},\n\t\t\t\t\"authorityValidation\": {\n\t\t\t\t\t\"type\": \"boolean\",\n\t\t\t\t\t\"description\": \"Whether credential is validated by issuing authority\"\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"required\": [\"databaseMatch\", \"authorityValidation\"],\n\t\t\t\"description\": \"Results from cross-referencing with external sources\"\n\t\t},\n\t\t\"biometricVerification\": {\n\t\t\t\"type\": \"boolean\",\n\t\t\t\"description\": \"Whether biometric verification passed\"\n\t\t},\n\t\t\"documentAuthenticity\": {\n\t\t\t\"type\": \"string\",\n\t\t\t\"enum\": [\"authentic\", \"suspicious\", \"counterfeit\"],\n\t\t\t\"description\": \"Assessment of document authenticity\"\n\t\t},\n\t\t\"anomaliesDetected\": {\n\t\t\t\"type\": \"array\",\n\t\t\t\"items\": {\n\t\t\t\t\"type\": \"string\"\n\t\t\t},\n\t\t\t\"description\": \"List of anomalies or issues detected during verification\"\n\t\t},\n\t\t\"recommendedAction\": {\n\t\t\t\"type\": \"string\",\n\t\t\t\"description\": \"Recommended action based on verification results\"\n\t\t},\n\t\t\"reasoning\": {\n\t\t\t\"type\": \"string\",\n\t\t\t\"description\": \"Detailed reasoning for the verification decision\"\n\t\t}\n\t},\n\t\"required\": [\"credentialId\", \"verificationStatus\", \"verificationScore\", \"crossReferenceResults\", \"biometricVerification\", \"documentAuthenticity\", \"anomaliesDetected\", \"recommendedAction\", \"reasoning\"]\n}"
      },
      "typeVersion": 1.3
    },
    {
      "id": "46f62ba7-bbe6-4b51-8b14-bcc3455ba5c9",
      "name": "Risk Assessment Output Parser",
      "type": "@n8n/n8n-nodes-langchain.outputParserStructured",
      "position": [
        -272,
        576
      ],
      "parameters": {
        "schemaType": "manual",
        "inputSchema": "{\n  \"type\": \"object\",\n  \"properties\": {\n    \"credentialId\": {\n      \"type\": \"string\"\n    },\n    \"riskLevel\": {\n      \"type\": \"string\",\n      \"enum\": [\"critical\", \"high\", \"medium\", \"low\"]\n    },\n    \"riskScore\": {\n      \"type\": \"number\",\n      \"minimum\": 0,\n      \"maximum\": 100\n    },\n    \"fraudProbability\": {\n      \"type\": \"number\",\n      \"minimum\": 0,\n      \"maximum\": 100\n    },\n    \"identityTheftRisk\": {\n      \"type\": \"boolean\"\n    },\n    \"complianceViolations\": {\n      \"type\": \"array\",\n      \"items\": {\n        \"type\": \"string\"\n      }\n    },\n    \"geopoliticalRisk\": {\n      \"type\": \"string\",\n      \"enum\": [\"high\", \"medium\", \"low\", \"none\"]\n    },\n    \"recommendedEscalation\": {\n      \"type\": \"boolean\"\n    },\n    \"mitigationActions\": {\n      \"type\": \"array\",\n      \"items\": {\n        \"type\": \"string\"\n      }\n    },\n    \"reasoning\": {\n      \"type\": \"string\"\n    }\n  }\n}"
      },
      "typeVersion": 1.3
    },
    {
      "id": "9a641341-f54e-44ac-86d7-ddf04376b302",
      "name": "Credential Validation Agent Tool",
      "type": "@n8n/n8n-nodes-langchain.agentTool",
      "position": [
        -1072,
        384
      ],
      "parameters": {
        "text": "={{ $fromAI(\"credentialData\", \"Credential data to validate\", \"json\") }}",
        "options": {
          "systemMessage": "You are a Credential Validation Specialist Agent.\n\nYour task is to:\n1. Inspect structured credential data for completeness and accuracy\n2. Validate data integrity (all required fields present, correct formats)\n3. Check format compliance with international standards (ISO, ICAO)\n4. Verify expiry status and date validity\n5. Assess security features presence and validity\n6. Calculate validation score (0-100) based on data quality\n7. Identify issues with severity levels (critical, high, medium, low)\n8. Return structured validation results\n\nValidation criteria:\n- Required fields: credentialId, credentialType, holderName, issueDate, expiryDate, issuingAuthority, documentNumber\n- Date formats must be valid ISO 8601\n- Expiry dates must be checked against current date\n- Document numbers must match expected patterns for credential type\n- Security features must be documented\n\nScoring:\n- 90-100: Excellent - all checks passed\n- 75-89: Good - minor issues\n- 60-74: Acceptable - some concerns\n- Below 60: Poor - significant issues\n\nYou MUST return structured JSON output with all required fields."
        },
        "hasOutputParser": true,
        "toolDescription": "Validates credential data structure, format compliance, and data integrity"
      },
      "typeVersion": 3
    },
    {
      "id": "b93c95de-78cd-4931-8eaf-1ab664cc4e0d",
      "name": "Credential Verification Agent Tool",
      "type": "@n8n/n8n-nodes-langchain.agentTool",
      "position": [
        -784,
        384
      ],
      "parameters": {
        "text": "={{ $fromAI(\"validationResults\", \"Validation results from validation agent\", \"json\") }}",
        "options": {
          "systemMessage": "You are a Credential Verification Specialist Agent.\n\nYour task is to:\n1. Perform deep verification of credential authenticity\n2. Cross-reference credential data against known databases and patterns\n3. Verify issuing authority legitimacy\n4. Assess document authenticity (authentic, suspicious, counterfeit)\n5. Detect anomalies in credential data patterns\n6. Evaluate biometric data consistency (if available)\n7. Calculate verification score (0-100) based on authenticity confidence\n8. Recommend actions (approve, manual_review, reject)\n9. Return structured verification results\n\nVerification checks:\n- Authority validation: Check if issuing authority is legitimate\n- Database cross-reference: Match against known valid credentials\n- Pattern analysis: Detect anomalies in document numbers, dates, formats\n- Biometric verification: Validate biometric data consistency\n- Security features: Verify authenticity markers\n\nScoring:\n- 90-100: High confidence - authentic\n- 75-89: Good confidence - likely authentic\n- 60-74: Medium confidence - requires review\n- Below 60: Low confidence - suspicious\n\nYou MUST return structured JSON output with all required fields."
        },
        "hasOutputParser": true,
        "toolDescription": "Verifies credential authenticity through cross-referencing and anomaly detection"
      },
      "typeVersion": 3
    },
    {
      "id": "0acd6bce-9c71-4d62-9a42-50f9bee89094",
      "name": "Risk Assessment Agent Tool",
      "type": "@n8n/n8n-nodes-langchain.agentTool",
      "position": [
        -496,
        384
      ],
      "parameters": {
        "text": "={{ $fromAI(\"verificationResults\", \"Verification results from verification agent\", \"json\") }}",
        "options": {
          "systemMessage": "You are a Risk Assessment Specialist Agent for credential verification.\n\nYour task is to:\n1. Analyze verification results to assess security and compliance risks\n2. Calculate overall risk score (0-100) and classify risk level\n3. Evaluate fraud probability based on verification findings\n4. Assess identity theft risk indicators\n5. Identify compliance violations (GDPR, KYC, AML regulations)\n6. Evaluate geopolitical risks based on issuing country\n7. Determine if escalation to security team is required\n8. Recommend mitigation actions\n9. Return structured risk assessment\n\nRisk classification:\n- Critical (80-100): Immediate escalation required, high fraud probability\n- High (60-79): Escalation recommended, significant concerns\n- Medium (40-59): Enhanced monitoring, some concerns\n- Low (0-39): Standard processing, minimal concerns\n\nRisk factors:\n- Verification score below 70: +20 risk points\n- Document authenticity suspicious/counterfeit: +30 risk points\n- Anomalies detected: +15 risk points per anomaly\n- Compliance violations: +25 risk points per violation\n- High geopolitical risk country: +20 risk points\n- Identity theft indicators: +30 risk points\n\nYou MUST return structured JSON output with all required fields."
        },
        "hasOutputParser": true,
        "toolDescription": "Assesses security and compliance risks based on verification results"
      },
      "typeVersion": 3
    },
    {
      "id": "3cde4c27-fb90-4033-bbfd-0d27153f09fe",
      "name": "Coordination Agent",
      "type": "@n8n/n8n-nodes-langchain.agent",
      "position": [
        -912,
        160
      ],
      "parameters": {
        "text": "={{ $json.credentials }}",
        "options": {
          "systemMessage": "You are a Credential Verification Orchestration Agent.\n\nYour role is to coordinate a multi-stage credential validation and verification workflow by calling specialized agent tools in sequence.\n\nWorkflow sequence:\n1. Call Credential Validation Agent Tool with credential data to validate structure and format\n2. Call Credential Verification Agent Tool with validation results to verify authenticity\n3. Call Risk Assessment Agent Tool with verification results to assess security risks\n4. Return the final risk assessment results\n\nIMPORTANT INSTRUCTIONS:\n- You MUST call all three agent tools in the correct sequence\n- Pass the output from each agent to the next agent in the chain\n- For the Validation Agent: pass the credential data\n- For the Verification Agent: pass the validation results\n- For the Risk Assessment Agent: pass the verification results\n- Return ONLY the final risk assessment output from the Risk Assessment Agent\n- Do NOT add explanations or commentary\n- Execute the workflow systematically for each credential\n\nYour final output should be the risk assessment results containing riskLevel, riskScore, and other risk metrics."
        },
        "promptType": "define"
      },
      "typeVersion": 3.1
    },
    {
      "id": "799a9776-83d6-42d4-b84b-3800b493c8e8",
      "name": "Route by Risk Level",
      "type": "n8n-nodes-base.switch",
      "position": [
        16,
        368
      ],
      "parameters": {
        "rules": {
          "values": [
            {
              "outputKey": "Critical",
              "conditions": {
                "options": {
                  "leftValue": "",
                  "caseSensitive": false,
                  "typeValidation": "loose"
                },
                "combinator": "and",
                "conditions": [
                  {
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    },
                    "leftValue": "={{ $json.output.riskLevel }}",
                    "rightValue": "critical"
                  }
                ]
              },
              "renameOutput": true
            },
            {
              "outputKey": "High",
              "conditions": {
                "options": {
                  "leftValue": "",
                  "caseSensitive": false,
                  "typeValidation": "loose"
                },
                "combinator": "and",
                "conditions": [
                  {
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    },
                    "leftValue": "={{ $json.output.riskLevel }}",
                    "rightValue": "high"
                  }
                ]
              },
              "renameOutput": true
            },
            {
              "outputKey": "Medium",
              "conditions": {
                "options": {
                  "leftValue": "",
                  "caseSensitive": false,
                  "typeValidation": "loose"
                },
                "combinator": "and",
                "conditions": [
                  {
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    },
                    "leftValue": "={{ $json.output.riskLevel }}",
                    "rightValue": "medium"
                  }
                ]
              },
              "renameOutput": true
            },
            {
              "outputKey": "Low",
              "conditions": {
                "options": {
                  "leftValue": "",
                  "caseSensitive": false,
                  "typeValidation": "loose"
                },
                "combinator": "and",
                "conditions": [
                  {
                    "operator": {
                      "type": "string",
                      "operation": "equals"
                    },
                    "leftValue": "={{ $json.output.riskLevel }}",
                    "rightValue": "low"
                  }
                ]
              },
              "renameOutput": true
            }
          ]
        },
        "options": {}
      },
      "typeVersion": 3.4
    },
    {
      "id": "6ad09feb-96b6-4923-a0b2-ea9e62f029c7",
      "name": "Process Critical Risk",
      "type": "n8n-nodes-base.set",
      "position": [
        240,
        112
      ],
      "parameters": {
        "options": {},
        "assignments": {
          "assignments": [
            {
              "id": "id-1",
              "name": "processingAction",
              "type": "string",
              "value": "IMMEDIATE_ESCALATION"
            },
            {
              "id": "id-2",
              "name": "notificationRequired",
              "type": "boolean",
              "value": true
            },
            {
              "id": "id-3",
              "name": "escalationTeam",
              "type": "string",
              "value": "Security & Compliance"
            },
            {
              "id": "id-4",
              "name": "priority",
              "type": "string",
              "value": "P0 - Critical"
            },
            {
              "id": "id-5",
              "name": "automatedActions",
              "type": "string",
              "value": "Freeze credential, Alert security team, Initiate investigation"
            }
          ]
        }
      },
      "typeVersion": 3.4
    },
    {
      "id": "2ef0dc15-1403-4155-a9c3-31d2053895ef",
      "name": "Process High Risk",
      "type": "n8n-nodes-base.set",
      "position": [
        240,
        304
      ],
      "parameters": {
        "options": {},
        "assignments": {
          "assignments": [
            {
              "id": "id-1",
              "name": "processingAction",
              "type": "string",
              "value": "ESCALATION_RECOMMENDED"
            },
            {
              "id": "id-2",
              "name": "notificationRequired",
              "type": "boolean",
              "value": true
            },
            {
              "id": "id-3",
              "name": "escalationTeam",
              "type": "string",
              "value": "Verification Team"
            },
            {
              "id": "id-4",
              "name": "priority",
              "type": "string",
              "value": "P1 - High"
            },
            {
              "id": "id-5",
              "name": "automatedActions",
              "type": "array",
              "value": "[\"Flag for manual review\", \"Enhanced monitoring\"]"
            }
          ]
        }
      },
      "typeVersion": 3.4
    },
    {
      "id": "ee6c3163-d19c-461e-9f87-6fb7dcee07b8",
      "name": "Process Medium Risk",
      "type": "n8n-nodes-base.set",
      "position": [
        240,
        496
      ],
      "parameters": {
        "options": {},
        "assignments": {
          "assignments": [
            {
              "id": "id-1",
              "name": "processingAction",
              "type": "string",
              "value": "ENHANCED_MONITORING"
            },
            {
              "id": "id-2",
              "name": "notificationRequired",
              "type": "boolean",
              "value": false
            },
            {
              "id": "id-3",
              "name": "escalationTeam",
              "type": "string",
              "value": "Operations Team"
            },
            {
              "id": "id-4",
              "name": "priority",
              "type": "string",
              "value": "P2 - Medium"
            },
            {
              "id": "id-5",
              "name": "automatedActions",
              "type": "array",
              "value": "[\"Additional verification checks\", \"Periodic review\"]"
            }
          ]
        }
      },
      "typeVersion": 3.4
    },
    {
      "id": "2096185b-795c-411a-adc7-c42a784eb24d",
      "name": "Process Low Risk",
      "type": "n8n-nodes-base.set",
      "position": [
        240,
        688
      ],
      "parameters": {
        "options": {},
        "assignments": {
          "assignments": [
            {
              "id": "id-1",
              "name": "processingAction",
              "type": "string",
              "value": "STANDARD_PROCESSING"
            },
            {
              "id": "id-2",
              "name": "notificationRequired",
              "type": "boolean",
              "value": false
            },
            {
              "id": "id-3",
              "name": "escalationTeam",
              "type": "string",
              "value": "None"
            },
            {
              "id": "id-4",
              "name": "priority",
              "type": "string",
              "value": "P3 - Low"
            },
            {
              "id": "id-5",
              "name": "automatedActions",
              "type": "string",
              "value": "Approve for standard processing"
            }
          ]
        }
      },
      "typeVersion": 3.4
    },
    {
      "id": "a56648db-4362-49bb-a2c2-28deb7c4e572",
      "name": "Merge All Risk Paths",
      "type": "n8n-nodes-base.merge",
      "position": [
        512,
        368
      ],
      "parameters": {
        "numberInputs": 4
      },
      "typeVersion": 3.2
    },
    {
      "id": "8d9797e2-f043-4b16-89b3-e60e05d05115",
      "name": "Final Report",
      "type": "n8n-nodes-base.set",
      "position": [
        736,
        400
      ],
      "parameters": {
        "options": {},
        "assignments": {
          "assignments": [
            {
              "id": "id-1",
              "name": "reportGeneratedAt",
              "type": "string",
              "value": "={{ $now.toISO() }}"
            },
            {
              "id": "id-2",
              "name": "workflowStatus",
              "type": "string",
              "value": "Completed"
            },
            {
              "id": "id-3",
              "name": "totalCredentialsProcessed",
              "type": "number",
              "value": "={{ $json.credentialId ? 1 : 0 }}"
            },
            {
              "id": "id-4",
              "name": "finalRecommendation",
              "type": "string",
              "value": "={{ $json.processingAction }}"
            }
          ]
        }
      },
      "typeVersion": 3.4
    },
    {
      "id": "fb31b335-b96f-4122-9fe8-00332d3c9885",
      "name": "Sticky Note",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -1936,
        -384
      ],
      "parameters": {
        "width": 640,
        "height": 352,
        "content": "## How It Works\nThis workflow automates comprehensive enterprise risk assessment and mitigation planning for organizations managing complex operational, financial, and compliance risks. Designed for risk managers, internal audit teams, and executive leadership, it solves the challenge of continuously evaluating multi-dimensional risks, validating threat severity, and coordinating appropriate mitigation strategies across diverse business functions. The system triggers on-demand or scheduled assessments, generates sample credential data for testing, deploys a Coordination Agent to orchestrate specialized risk evaluations through parallel AI agents (Credential Validation verifies identity risks, Credential Verification confirms data accuracy, Risk Assessment evaluates threat levels), routes findings by severity (critical/high/medium/low), and merges outputs into consolidated reports. By combining multi-agent risk analysis with intelligent prioritization and unified reporting, organizations achieve 360-degree risk visibility, reduce assessment cycles from weeks to hours, ensure consistent evaluation frameworks, and enable proactive mitigation before risks materialize into losses."
      },
      "typeVersion": 1
    },
    {
      "id": "00709a17-1b51-4506-8d0f-f037b6a16540",
      "name": "Sticky Note1",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -1232,
        -336
      ],
      "parameters": {
        "width": 416,
        "height": 304,
        "content": "## Setup Steps\n1. Connect **Manual Trigger** for on-demand assessments or configure **Schedule Trigger** for routine evaluations\n2. Configure **risk data sources** \n3. Add **AI model API keys** to Coordination Agent and all specialized agents\n4. Define **risk scoring criteria** and severity thresholds in agent prompts aligned with company risk appetite\n5. Configure **routing conditions** for each risk level with appropriate handling workflows\n6. Set up **reporting output** format and distribution channels for consolidated risk reports"
      },
      "typeVersion": 1
    },
    {
      "id": "ee5218d3-e27b-486c-b780-4c8fc2360e88",
      "name": "Sticky Note2",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -752,
        -400
      ],
      "parameters": {
        "color": 5,
        "width": 480,
        "height": 352,
        "content": "## Prerequisites\nEnterprise risk management system access, AI service accounts\n## Use Cases\nCybersecurity risk assessments, fraud risk evaluations, third-party vendor risk reviews\n## Customization\nModify agent prompts for industry-specific risk frameworks (NIST, ISO 31000, COSO)\n## Benefits\nReduces risk assessment time from weeks to hours, provides 360-degree risk visibility"
      },
      "typeVersion": 1
    },
    {
      "id": "550c1a22-1fe4-4584-8810-9d8fb298f78e",
      "name": "Sticky Note3",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        448,
        -32
      ],
      "parameters": {
        "color": 7,
        "width": 448,
        "height": 944,
        "content": "## Unified Report Generation\n**What**: Merges all risk assessments into consolidated report with prioritized recommendations  \n**Why**: Single comprehensive view enables executive decision-making and coordinated mitigation planning across organization"
      },
      "typeVersion": 1
    },
    {
      "id": "9c4a2a7d-68bd-4682-956e-728b999640fd",
      "name": "Sticky Note4",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -96,
        -32
      ],
      "parameters": {
        "color": 7,
        "width": 496,
        "height": 928,
        "content": "## Priority-Based Routing\n**What**: Routes findings by severity\u2014critical/high/medium/low through conditional logic for appropriate handling  \n**Why**: Risk stratification ensures urgent threats receive immediate attention while maintaining complete documentation"
      },
      "typeVersion": 1
    },
    {
      "id": "0ae4b154-58f5-4e5d-ba83-92ff673cf1b4",
      "name": "Sticky Note5",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -1920,
        16
      ],
      "parameters": {
        "color": 7,
        "width": 1760,
        "height": 768,
        "content": "## Flexible Assessment & Multi-Agent Risk Analysis\n**What**: Coordination Agent orchestrates three specialized agents for credential validation, verification, and risk scoring  \n**Why**: Parallel expert evaluation identifies risks across identity, data integrity, and threat dimensions simultaneously"
      },
      "typeVersion": 1
    }
  ],
  "active": false,
  "settings": {
    "availableInMCP": false,
    "executionOrder": "v1"
  },
  "versionId": "4e2bc23d-e2d9-4f7b-b49f-6904d96f7de5",
  "connections": {
    "Manual Trigger": {
      "main": [
        [
          {
            "node": "Workflow Configuration",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Process Low Risk": {
      "main": [
        [
          {
            "node": "Merge All Risk Paths",
            "type": "main",
            "index": 3
          }
        ]
      ]
    },
    "Process High Risk": {
      "main": [
        [
          {
            "node": "Merge All Risk Paths",
            "type": "main",
            "index": 1
          }
        ]
      ]
    },
    "Coordination Agent": {
      "main": [
        [
          {
            "node": "Route by Risk Level",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Process Medium Risk": {
      "main": [
        [
          {
            "node": "Merge All Risk Paths",
            "type": "main",
            "index": 2
          }
        ]
      ]
    },
    "Route by Risk Level": {
      "main": [
        [
          {
            "node": "Process Critical Risk",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Process High Risk",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Process Medium Risk",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Process Low Risk",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Merge All Risk Paths": {
      "main": [
        [
          {
            "node": "Final Report",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Process Critical Risk": {
      "main": [
        [
          {
            "node": "Merge All Risk Paths",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Workflow Configuration": {
      "main": [
        [
          {
            "node": "Generate Sample Credential Data",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Validation Output Parser": {
      "ai_outputParser": [
        [
          {
            "node": "Credential Validation Agent Tool",
            "type": "ai_outputParser",
            "index": 0
          }
        ]
      ]
    },
    "Risk Assessment Agent Tool": {
      "ai_tool": [
        [
          {
            "node": "Coordination Agent",
            "type": "ai_tool",
            "index": 0
          }
        ]
      ]
    },
    "Verification Output Parser": {
      "ai_outputParser": [
        [
          {
            "node": "Credential Verification Agent Tool",
            "type": "ai_outputParser",
            "index": 0
          }
        ]
      ]
    },
    "Risk Assessment Output Parser": {
      "ai_outputParser": [
        [
          {
            "node": "Risk Assessment Agent Tool",
            "type": "ai_outputParser",
            "index": 0
          }
        ]
      ]
    },
    "Generate Sample Credential Data": {
      "main": [
        [
          {
            "node": "Coordination Agent",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "OpenAI Model - Validation Agent": {
      "ai_languageModel": [
        [
          {
            "node": "Credential Validation Agent Tool",
            "type": "ai_languageModel",
            "index": 0
          }
        ]
      ]
    },
    "Credential Validation Agent Tool": {
      "ai_tool": [
        [
          {
            "node": "Coordination Agent",
            "type": "ai_tool",
            "index": 0
          }
        ]
      ]
    },
    "OpenAI Model - Coordination Agent": {
      "ai_languageModel": [
        [
          {
            "node": "Coordination Agent",
            "type": "ai_languageModel",
            "index": 0
          }
        ]
      ]
    },
    "OpenAI Model - Verification Agent": {
      "ai_languageModel": [
        [
          {
            "node": "Credential Verification Agent Tool",
            "type": "ai_languageModel",
            "index": 0
          }
        ]
      ]
    },
    "Credential Verification Agent Tool": {
      "ai_tool": [
        [
          {
            "node": "Coordination Agent",
            "type": "ai_tool",
            "index": 0
          }
        ]
      ]
    },
    "OpenAI Model - Risk Assessment Agent": {
      "ai_languageModel": [
        [
          {
            "node": "Risk Assessment Agent Tool",
            "type": "ai_languageModel",
            "index": 0
          }
        ]
      ]
    }
  }
}

Credentials you'll need

Each integration node will prompt for credentials when you import. We strip credential IDs before publishing — you'll add your own.

Pro

For the full experience including quality scoring and batch install features for each workflow upgrade to Pro

About this workflow

This workflow automates comprehensive enterprise risk assessment and mitigation planning for organizations managing complex operational, financial, and compliance risks. Designed for risk managers, internal audit teams, and executive leadership, it solves the challenge of…

Source: https://n8n.io/workflows/13331/ — original creator credit. Request a take-down →

More AI & RAG workflows → · Browse all categories →

Related workflows

Workflows that share integrations, category, or trigger type with this one. All free to copy and import.

AI & RAG

This workflow serves as a comprehensive "Workflow Nodes SEO & Documentation Generator". It uses AI to analyze, rename, and document n8n workflows, offering a streamlined way to optimize workflow reada

Form Trigger, n8n, Output Parser Autofixing +11
AI & RAG

🧠 Automate end-to-end SEO blog creation and WordPress publishing using a GPT-5 multi-agent workflow with real-time research, metadata generation, and optional featured images.

Output Parser Structured, HTTP Request, OpenAI +10
AI & RAG

This workflow automates legal policy governance for legal teams, policy managers, and compliance officers, eliminating manual document review, approval classification, and multi-channel stakeholder di

Form Trigger, OpenAI Chat, Agent Tool +7
AI & RAG

This workflow automates end-to-end code repository governance scanning using a multi-agent AI orchestration system. Designed for engineering leads, DevSecOps teams, and CTOs, it replaces manual code a

Ssh, Agent, OpenAI Chat +2
AI & RAG

This workflow automates end-to-end candidate evaluation for HR teams and recruiters overwhelmed by high-volume hiring. Designed for talent acquisition professionals, hiring managers, and HR operations

Form Trigger, Agent, Agent Tool +5