<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Building Executive Security Briefings

## Agent Script

### Commands

| Command | Description |
|---|---|
| `node agent.js briefing --audience board --quarter Q1-2026` | Generate board-level security briefing package |
| `node agent.js risk-quantify --scenario ransomware --method fair` | Quantify risk scenario using FAIR methodology |
| `node agent.js metrics --kpis mttd,mttr,patch-rate --period monthly` | Build executive KPI dashboard data |
| `node agent.js investment --budget 2M --priorities cloud,identity` | Generate security investment recommendation |

### Examples

```bash
# Generate board-level security briefing package
node agent.js briefing --audience board --quarter Q1-2026

# Quantify risk scenario using FAIR methodology
node agent.js risk-quantify --scenario ransomware --method fair

# Build executive KPI dashboard data
node agent.js metrics --kpis mttd,mttr,patch-rate --period monthly

# Generate security investment recommendation
node agent.js investment --budget 2M --priorities cloud,identity
```

## External Tools

| Tool | Command | Purpose |
|---|---|---|
| RiskLens | `risklens --analyze scenario.json` | FAIR-based risk quantification |
| PowerBI | `powerbi --refresh security-dashboard` | Executive dashboard visualization |
| MITRE ATT&CK Navigator | `attack-navigator --export heatmap.svg` | Threat coverage visualization |

## Compliance Frameworks

| Standard | Training Requirement |
|---|---|
| FAIR | Factor Analysis of Information Risk quantification |
| NIST RMF | Risk Management Framework for federal and enterprise |
| ISO 31000 | International risk management standard |
| NACD Cyber-Risk Oversight | Board-level cyber risk governance handbook |
