---

name: risk-assessment description: Risk identification and analysis frameworks for technology decisions

Risk Assessment Skill

Objectives

Provide structured methodology for identifying and analyzing risks:

• Systematic risk identification
• Impact and probability assessment
• Mitigation strategy development

Risk Categories

Technical Risks

Implementation Risks

Business Risks

Risk Assessment Matrix

Probability Scale

Impact Scale

Risk Score = Probability × Impact

Mitigation Strategies

Strategy Types

1. Avoid: Eliminate the risk source
2. Transfer: Shift risk to third party (insurance, contracts)
3. Mitigate: Reduce probability or impact
4. Accept: Acknowledge and prepare contingency

Mitigation Plan Template

Copy## Risk: [Risk Name]

**Category**: [Technical/Implementation/Business]
**Probability**: [1-5]
**Impact**: [1-5]
**Risk Score**: [P × I]

### Description
[Detailed risk description]

### Root Cause
[What causes this risk]

### Impact Analysis
- Best case: [Outcome]
- Most likely: [Outcome]
- Worst case: [Outcome]

### Mitigation Strategy
- Strategy type: [Avoid/Transfer/Mitigate/Accept]
- Actions:
  1. [Action 1]
  2. [Action 2]
- Cost: [Mitigation cost]

### Contingency Plan
[What to do if risk occurs]

### Monitoring
- Trigger indicators: [Warning signs]
- Review frequency: [Weekly/Monthly]

Output Specification

Risk assessments should include:

• Risk register with all identified risks
• Heat map visualization (probability vs impact)
• Top risks with mitigation plans
• Residual risk summary
• Monitoring recommendations