{"id":"https://openalex.org/W7133236347","doi":"https://doi.org/10.1016/j.aiopen.2026.02.006","title":"TRiSM for Agentic AI: A review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems","display_name":"TRiSM for Agentic AI: A review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7133236347","doi":"https://doi.org/10.1016/j.aiopen.2026.02.006"},"language":"en","primary_location":{"id":"doi:10.1016/j.aiopen.2026.02.006","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.aiopen.2026.02.006","pdf_url":null,"source":{"id":"https://openalex.org/S4210194376","display_name":"AI Open","issn_l":"2666-6510","issn":["2666-6510"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"AI Open","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1016/j.aiopen.2026.02.006","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5127840106","display_name":"Shaina Raza","orcid":null},"institutions":[{"id":"https://openalex.org/I4210127509","display_name":"Vector Institute","ror":"https://ror.org/03kqdja62","country_code":"CA","type":"facility","lineage":["https://openalex.org/I4210127509"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Shaina Raza","raw_affiliation_strings":["Vector Institute, Toronto, Canada"],"raw_orcid":"https://orcid.org/0000-0003-1061-5845","affiliations":[{"raw_affiliation_string":"Vector Institute, Toronto, Canada","institution_ids":["https://openalex.org/I4210127509"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127795460","display_name":"Ranjan Sapkota","orcid":null},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Ranjan Sapkota","raw_affiliation_strings":["Cornell University, USA"],"raw_orcid":"https://orcid.org/0000-0002-5417-6744","affiliations":[{"raw_affiliation_string":"Cornell University, USA","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013737840","display_name":"Manoj Karkee","orcid":"https://orcid.org/0000-0001-5337-4848"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Manoj Karkee","raw_affiliation_strings":["Cornell University, USA"],"raw_orcid":"https://orcid.org/0000-0001-5337-4848","affiliations":[{"raw_affiliation_string":"Cornell University, USA","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5127851450","display_name":"Christos Emmanouilidis","orcid":null},"institutions":[{"id":"https://openalex.org/I169381384","display_name":"University of Groningen","ror":"https://ror.org/012p63287","country_code":"NL","type":"education","lineage":["https://openalex.org/I169381384"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Christos Emmanouilidis","raw_affiliation_strings":["University of Groningen, Netherlands"],"raw_orcid":"https://orcid.org/0000-0003-4335-6915","affiliations":[{"raw_affiliation_string":"University of Groningen, Netherlands","institution_ids":["https://openalex.org/I169381384"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5127795460","https://openalex.org/A5127840106","https://openalex.org/A5127851450"],"corresponding_institution_ids":["https://openalex.org/I169381384","https://openalex.org/I205783295","https://openalex.org/I4210127509"],"apc_list":{"value":800,"currency":"USD","value_usd":800},"apc_paid":{"value":800,"currency":"USD","value_usd":800},"fwci":251.1039,"has_fulltext":false,"cited_by_count":30,"citation_normalized_percentile":{"value":0.99985223,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"7","issue":null,"first_page":"71","last_page":"95"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.34220001101493835,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.34220001101493835,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.19120000302791595,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12203","display_name":"Mobile Agent-Based Network Management","score":0.14110000431537628,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.692799985408783},{"id":"https://openalex.org/keywords/accountability","display_name":"Accountability","score":0.6205999851226807},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.5318999886512756},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5295000076293945},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5271999835968018},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.45899999141693115},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.4083999991416931}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.692799985408783},{"id":"https://openalex.org/C2776007630","wikidata":"https://www.wikidata.org/wiki/Q2798912","display_name":"Accountability","level":2,"score":0.6205999851226807},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.5318999886512756},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5295000076293945},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5271999835968018},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.48069998621940613},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.45899999141693115},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.4083999991416931},{"id":"https://openalex.org/C14224292","wikidata":"https://www.wikidata.org/wiki/Q13600188","display_name":"Conceptual framework","level":2,"score":0.39399999380111694},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3741999864578247},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.37220001220703125},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.35600000619888306},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.3522999882698059},{"id":"https://openalex.org/C2777720028","wikidata":"https://www.wikidata.org/wiki/Q18394118","display_name":"Responsible Research and Innovation","level":2,"score":0.3375999927520752},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.3319000005722046},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3059999942779541},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.2883000075817108},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2743000090122223},{"id":"https://openalex.org/C505623098","wikidata":"https://www.wikidata.org/wiki/Q3002932","display_name":"Critical security studies","level":5,"score":0.2651999890804291},{"id":"https://openalex.org/C71750763","wikidata":"https://www.wikidata.org/wiki/Q646164","display_name":"General partnership","level":2,"score":0.2639999985694885},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.25769999623298645},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.25440001487731934},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.25}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1016/j.aiopen.2026.02.006","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.aiopen.2026.02.006","pdf_url":null,"source":{"id":"https://openalex.org/S4210194376","display_name":"AI Open","issn_l":"2666-6510","issn":["2666-6510"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"AI Open","raw_type":"journal-article"},{"id":"pmh:oai:pure.rug.nl:openaire/d68becbb-3a20-4cb9-9271-9b63f7de4be9","is_oa":false,"landing_page_url":"https://research.rug.nl/en/publications/d68becbb-3a20-4cb9-9271-9b63f7de4be9","pdf_url":null,"source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Raza, S, Sapkota, R, Karkee, M & Emmanouilidis, C 2026, 'TRiSM for Agentic AI : A review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems', AI Open, vol. 7, 71-95. https://doi.org/10.1016/j.aiopen.2026.02.006","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:pure.rug.nl:openaire_cris_publications/d68becbb-3a20-4cb9-9271-9b63f7de4be9","is_oa":true,"landing_page_url":"https://hdl.handle.net/11370/d68becbb-3a20-4cb9-9271-9b63f7de4be9","pdf_url":null,"source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Raza, S, Sapkota, R, Karkee, M & Emmanouilidis, C 2026, 'TRiSM for Agentic AI : A review of Trust, Risk, and Security Management in LLM-based Agentic Multi-Agent Systems', AI Open, vol. 7, 71-95. https://doi.org/10.1016/j.aiopen.2026.02.006","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1016/j.aiopen.2026.02.006","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.aiopen.2026.02.006","pdf_url":null,"source":{"id":"https://openalex.org/S4210194376","display_name":"AI Open","issn_l":"2666-6510","issn":["2666-6510"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"AI Open","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320332299","display_name":"National Institute of Food and Agriculture","ror":"https://ror.org/05qx3fv49"},{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1979004942","https://openalex.org/W2046869978","https://openalex.org/W2049934619","https://openalex.org/W2078159446","https://openalex.org/W2114968482","https://openalex.org/W2116437970","https://openalex.org/W2133135172","https://openalex.org/W2159024459","https://openalex.org/W2180809782","https://openalex.org/W2282821441","https://openalex.org/W2606882085","https://openalex.org/W2903850320","https://openalex.org/W2953127211","https://openalex.org/W2963641083","https://openalex.org/W4224309307","https://openalex.org/W4297823417","https://openalex.org/W4313263659","https://openalex.org/W4382318690","https://openalex.org/W4388010170","https://openalex.org/W4388720055","https://openalex.org/W4392979729","https://openalex.org/W4396699338","https://openalex.org/W4400654973","https://openalex.org/W4402243741","https://openalex.org/W4404024323","https://openalex.org/W4404969247","https://openalex.org/W4405546960","https://openalex.org/W4406728221","https://openalex.org/W4406800520","https://openalex.org/W4409276199","https://openalex.org/W4409367084","https://openalex.org/W4410244386","https://openalex.org/W4412482272","https://openalex.org/W4412877234","https://openalex.org/W4413427262","https://openalex.org/W4414198596"],"related_works":[],"abstract_inverted_index":{"Agentic":[0,44,56,77,112,167,199],"AI":[1,57,65,73],"systems,":[2],"built":[3],"upon":[4],"large":[5],"language":[6],"models":[7],"(LLMs)":[8],"and":[9,19,23,35,58,70,87,109,125,144,157,176,182,196,213],"deployed":[10],"in":[11,39,129,166,215],"multi-agent":[12],"configurations,":[13],"are":[14,154],"redefining":[15],"intelligence,":[16],"autonomy,":[17],"collaboration,":[18],"decision-making":[20],"across":[21],"enterprise":[22],"societal":[24],"domains.":[25],"This":[26],"review":[27,186],"presents":[28],"a":[29,189],"structured":[30,79],"analysis":[31],"of":[32,42,55,97,111,198],"Trust,":[33],"Risk,":[34],"Security":[36],"Management":[37],"(TRiSM)":[38],"the":[40,52,72,95,106,135,145,193],"context":[41],"LLM-based":[43],"Multi-Agent":[45],"Systems":[46],"(AMAS).":[47],"We":[48,67,159],"begin":[49],"by":[50],"examining":[51],"conceptual":[53],"foundations":[54],"highlight":[59],"its":[60],"architectural":[61],"distinctions":[62],"from":[63,115],"traditional":[64],"agents.":[66],"then":[68],"adapt":[69],"extend":[71],"TRiSM":[74,209],"framework":[75],"for":[76,163,192],"AI,":[78,113,168,200],"around":[80],"key":[81,202],"pillars:":[82],"Explainability,":[83],"ModelOps,":[84],"Security,":[85],"Privacy":[86],"their":[88,216],"Lifecycle":[89],"Governance":[90],",":[91],"each":[92],"contextualized":[93],"to":[94,104,118,173,204],"challenges":[96],"AMAS.":[98],"A":[99],"risk":[100],"taxonomy":[101],"is":[102],"proposed":[103],"capture":[105],"unique":[107],"threats":[108],"vulnerabilities":[110],"ranging":[114],"coordination":[116,124],"failures":[117],"prompt-based":[119],"adversarial":[120,180],"manipulation.":[121],"To":[122],"make":[123],"tool":[126],"use":[127],"measurable":[128],"practice,":[130],"we":[131],"propose":[132],"two":[133],"metrics:":[134],"Component":[136],"Synergy":[137],"Score":[138],"(CSS),":[139],"which":[140,150],"captures":[141],"inter-agent":[142],"enablement,":[143],"Tool":[146],"Utilization":[147],"Efficacy":[148],"(TUE),":[149],"evaluates":[151],"whether":[152],"tools":[153],"invoked":[155],"correctly":[156],"efficiently.":[158],"further":[160],"discuss":[161],"strategies":[162],"improving":[164],"explainability":[165],"as":[169,171],"well":[170],"approaches":[172],"enhancing":[174],"security":[175],"privacy":[177],"through":[178],"encryption,":[179],"robustness,":[181],"regulatory":[183],"compliance.":[184],"The":[185],"concludes":[187],"with":[188,208],"research":[190],"roadmap":[191],"responsible":[194],"development":[195],"deployment":[197],"highlighting":[201],"directions":[203],"align":[205],"emerging":[206],"systems":[207],"principles-ensuring":[210],"safety,":[211],"transparency,":[212],"accountability":[214],"operation.":[217]},"counts_by_year":[{"year":2026,"cited_by_count":25},{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2026-03-03T00:00:00"}