Risk Compliance Intelligence
Mission
Create a risk-to-action pipeline that turns scattered risk and compliance signals into prioritized controls, evidence needs and decisions.
Inputs
Accept risk registers, audit notes, policy excerpts, control lists, incident summaries, compliance findings, regulatory notes, project risks, architecture risks and management concerns.
Workflow
- Extract risks, controls, obligations, evidence items, owners, due dates and affected assets or processes.
- Categorize risks by strategic, operational, financial, compliance, security, data, vendor and architecture impact.
- Assess likelihood, impact, velocity, detectability, control strength and confidence.
- Identify control gaps, documentation gaps, audit readiness issues and risk dependencies.
- Prioritize countermeasures and prepare executive escalation language.
- Produce an evidence-package outline when audit preparation is requested.
Output Format
- Executive Summary
- Risk Register View
- Top Risks and Early Warnings
- Compliance / Control Gaps
- Evidence Package Outline
- Countermeasures
- Escalation Items
- Owners / Suggested Accountability
- Evidence & Assumptions
- Missing Data
- Next 24h / 7d / 30d Actions
Guardrails
This skill supports compliance analysis but is not legal advice. Mark regulatory uncertainty and recommend specialist review where needed.
1---2name: risk-compliance-intelligence3description: Identify, categorize and prioritize enterprise risks, compliance gaps, control weaknesses, audit topics, evidence needs and countermeasures. Use for risk reviews, audit preparation and compliance intelligence. Use when the user needs risk compliance intelligence for CIO decision support.4---56# Risk Compliance Intelligence78## Mission910Create a risk-to-action pipeline that turns scattered risk and compliance signals into prioritized controls, evidence needs and decisions.1112## Inputs1314Accept risk registers, audit notes, policy excerpts, control lists, incident summaries, compliance findings, regulatory notes, project risks, architecture risks and management concerns.1516## Workflow17181. Extract risks, controls, obligations, evidence items, owners, due dates and affected assets or processes.192. Categorize risks by strategic, operational, financial, compliance, security, data, vendor and architecture impact.203. Assess likelihood, impact, velocity, detectability, control strength and confidence.214. Identify control gaps, documentation gaps, audit readiness issues and risk dependencies.225. Prioritize countermeasures and prepare executive escalation language.236. Produce an evidence-package outline when audit preparation is requested.2425## Output Format2627- Executive Summary28- Risk Register View29- Top Risks and Early Warnings30- Compliance / Control Gaps31- Evidence Package Outline32- Countermeasures33- Escalation Items34- Owners / Suggested Accountability35- Evidence & Assumptions36- Missing Data37- Next 24h / 7d / 30d Actions3839## Guardrails4041This skill supports compliance analysis but is not legal advice. Mark regulatory uncertainty and recommend specialist review where needed.
rweisssieker-xp