# Security Risk Adapter

> Convert Defender, Sentinel, Splunk, Qualys or security finding exports into business risk and control-debt signals. Use when the user needs security risk adapter for CIO decision support.

- Skill: `rweisssieker-xp/security-risk-adapter` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add rweisssieker-xp/security-risk-adapter`
- Raw SKILL.md: https://api.skillmd.com/api/skills/rweisssieker-xp/security-risk-adapter/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: rweisssieker-xp (https://skillmd.com/u/rweisssieker-xp)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/rweisssieker-xp/security-risk-adapter

---


# Security Risk Adapter

## Mission

Translate security findings into CIO-level business impact, risk acceptance, control debt and decision signals.

## Inputs

Accept vulnerability exports, SIEM alerts, Defender/Sentinel/Splunk/Qualys CSV or JSON exports, identity findings and pasted security summaries.

## Workflow

1. Identify finding ID, severity, affected asset, owner, summary and remediation state.
2. Map technical findings to business impact and decision options.
3. Detect control debt, risk acceptance needs and missing evidence.
4. Translate findings into CISO/CIO board-ready language.
5. Route output into risk chain, compliance evidence and action governance workflows.

## Output Format

- Executive Summary
- Security Findings
- Business Impact
- Control Debt
- Risk Acceptance Needs
- Missing Evidence
- Recommended Actions

## Guardrails

Security outputs are decision support, not final security determinations. Use only provided exports or approved connectors.