risk-assessment

The risk-assessment skill provides a systematic framework for identifying, evaluating, and mitigating operational risks across projects, processes, vendors, and strategic decisions. It helps teams proactively address potential issues before they materialize by using a structured risk assessment matrix that categorizes risks by likelihood and impact, enabling prioritization of mitigation efforts where they matter most.

This skill encompasses six major risk categories: operational (process failures, staffing gaps, system outages), financial (budget overruns, vendor costs, revenue impact), compliance (regulatory violations, audit findings), strategic (market changes, competitive threats), reputational (customer impact, public perception), and security (data breaches, access control, third-party vulnerabilities). Each risk is documented in a standardized register format that captures description, likelihood, impact, risk level, mitigation strategy, ownership, and current status.

The skill is designed for project managers, business analysts, compliance officers, security teams, and decision-makers who need to evaluate risks associated with initiatives, vendor relationships, operational changes, or strategic decisions. It produces actionable, prioritized risk registers that focus on controllable and material risks, making it practical for real-world risk management rather than theoretical exercises. Use this skill when planning projects, conducting vendor assessments, evaluating operational changes, or responding to questions like "what could go wrong" or "what are the risks."