Towards Securing AI Integrated Business Processes: a Reasoning Framework Informed by a Semantic Model

The integration of large language models (LLMs) and Artificial Intelligence (AI) into business processes is transforming organizational workflows, by automating LLM-based AI tasks. This incorporation of agentic AI into business processes introduces new security risks that are often overlooked at the business level. Existing frameworks focus on application-level controls, leaving a gap in understanding how AI-related vulnerabilities impact overall process behavior. This research-in-progress paper introduces a novel framework that links business process models with agentic AI components, capturing key security threats, mitigation strategies, and their interdependencies. This framework includes an inference mechanism that uses a semantic model to assess how the integration of AI agents can impact business processes.