Management Risk Management

Purpose

Identify, assess, and mitigate project and technical risks through a structured risk register. Calculates risk scores as probability times impact, assigns named owners, and tracks mitigation through regular review during sprint retrospectives.

Risk management is not about eliminating risk entirely — that is neither possible nor desirable. It is about making informed decisions under uncertainty by surfacing risks before they become emergencies. This skill provides a systematic five-step process: identify risks across all categories, categorize them for trend analysis, assess each with a probability and impact score, plan a specific response strategy for each, and review regularly. Every risk in the register has a score, a responsible owner, and a clear response plan. An empty risk register is not a sign of a low-risk project — it is a sign that risks have not been surfaced yet.

The maturity model for risk management is visible in the register itself. A startup may have three items tracked in someone's head. A mature team maintains 10-20 documented risks with scores, owners, and response plans reviewed every sprint. The goal is not to reach zero risks — that is impossible. The goal is to have every significant risk visible, quantified, and managed so the team makes conscious tradeoffs rather than being surprised by avoidable problems.

Agent Protocol

Trigger

"risk management", "risk register", "risk assessment", "risk mitigation", "project risk", "technical risk", "risk matrix", "risk analysis", "probability impact", "risk log"