---

name: risk-assessment description: Identify, assess, and mitigate operational risks. Trigger with “what are the risks”, “risk assessment”, “risk register”, “what could go wrong”, or when the user is evaluating risks associated with a project, vendor, process, or decision.

Risk Assessment

Systematically identify, assess, and plan mitigations for operational risks.

Risk Assessment Matrix

	Low Impact	Medium Impact	High Impact
High Likelihood	Medium	High	Critical
Medium Likelihood	Low	Medium	High
Low Likelihood	Low	Low	Medium

Risk Categories

• Operational: Process failures, staffing gaps, system outages
• Financial: Budget overruns, vendor cost increases, revenue impact
• Compliance: Regulatory violations, audit findings, policy breaches
• Strategic: Market changes, competitive threats, technology shifts
• Reputational: Customer impact, public perception, partner relationships
• Security: Data breaches, access control failures, third-party vulnerabilities

Risk Register Format

For each risk, document:

• Description: What could happen
• Likelihood: High / Medium / Low
• Impact: High / Medium / Low
• Risk Level: Critical / High / Medium / Low
• Mitigation: What we’re doing to reduce likelihood or impact
• Owner: Who is responsible for managing this risk
• Status: Open / Mitigated / Accepted / Closed

Output

Produce a prioritized risk register with specific, actionable mitigations. Focus on risks that are controllable and material.