Risk Acceptance Docket

Draft a risk acceptance docket with owner, residual risk, expiry, compensating controls and required evidence. Use when the user needs risk acceptance docket for CIO decision support.

rweisssieker-xp 8f77b4d 2 files · 1.1 KB Updated

File contents

Risk Acceptance Docket

Mission

Make risk acceptance explicit, owned, time-boxed and reviewable.

Inputs

Accept risk chains, control gaps, audit notes, security findings, exception requests, decision packets and mitigation plans.

Workflow

  1. Identify material risks under consideration.
  2. Define business impact and residual risk.
  3. Name proposed acceptance owner.
  4. Add expiry, review date and compensating controls.
  5. Draft a docket for human approval.

Output Format

  • Executive Summary
  • Docket Required
  • Risk Acceptance Items
  • Owner
  • Expiry
  • Required Evidence
  • Acceptance Rule

Guardrails

Do not accept risk. Draft the docket for accountable human approval.

rweisssieker-xp/codex-plugin-autonomous-cio/tree/main/skills/risk-acceptance-docket commit 8f77b4de52

Frequently asked questions

npx skillmds@latest add rweisssieker-xp/risk-acceptance-docket