risk-assessment

作者: anthropic

識別、評估並減輕營運風險。可透過「有哪些風險」、「風險評估」、「風險登記冊」、「可能出什麼問題」等觸發,或當…

npx skills add https://github.com/anthropics/knowledge-work-plugins --skill risk-assessment

Risk Assessment

Systematically identify, assess, and plan mitigations for operational risks.

Risk Assessment Matrix

Low ImpactMedium ImpactHigh Impact
High LikelihoodMediumHighCritical
Medium LikelihoodLowMediumHigh
Low LikelihoodLowLowMedium

Risk Categories

  • Operational: Process failures, staffing gaps, system outages
  • Financial: Budget overruns, vendor cost increases, revenue impact
  • Compliance: Regulatory violations, audit findings, policy breaches
  • Strategic: Market changes, competitive threats, technology shifts
  • Reputational: Customer impact, public perception, partner relationships
  • Security: Data breaches, access control failures, third-party vulnerabilities

Risk Register Format

For each risk, document:

  • Description: What could happen
  • Likelihood: High / Medium / Low
  • Impact: High / Medium / Low
  • Risk Level: Critical / High / Medium / Low
  • Mitigation: What we're doing to reduce likelihood or impact
  • Owner: Who is responsible for managing this risk
  • Status: Open / Mitigated / Accepted / Closed

Output

Produce a prioritized risk register with specific, actionable mitigations. Focus on risks that are controllable and material.