Risk Register Manager

Maintains and analyzes organizational risk registers.

The register is user-owned state. Write one file per risk under ./grc-data/risks/, keep it reviewable in Git, and use schemas/risk.schema.json as the contract for JSON or JSON-equivalent YAML.

Capabilities

• Risk Identification: Identify and categorize risks
• Risk Scoring: Calculate inherent and residual risk scores
• Mitigation Tracking: Monitor remediation progress
• Risk Reporting: Generate board-level risk reports

Risk Assessment Framework

Likelihood Scale (1-5)