Risk Register Governance Review

Use this skill to convert a risk register governance, mitigations, control evidence, owners, triggers, review cadence, and acceptance decisions question into a concrete artifact with owners, gates, metrics, and recovery paths.

Workflow

1. Identify product decision, risk domains, stakeholders, owner, customer impact, regulatory/security sensitivity, and time horizon.
2. Read references/risk-register-governance-patterns.md.
3. Classify risks across product, market, technical, operational, security/privacy, legal/compliance, trust/safety, AI, revenue, and support.
4. Define severity, likelihood, detectability, controls, mitigations, owner, trigger, review cadence, residual risk, and acceptance authority.
5. Produce risk register, state machine, decision table, event schema, governance cadence, and escalation checklist.

When not to use

• Do not use for generic advice the base model already handles without this skill's specific artifact contract.

Guardrails