skills.rest
RuddyMoriarty
RuddyMoriartyCOMMUNITY
Explore all skills by this author โ†’
GitHub

cfo-risques-conformite

Generate COSO ERM 5x5 risk matrices and top-10 risk lists from company files.

1|Updated Apr 14, 2026
Search Tags:#compliance#risk-management#business-continuity#internal-control#coso-erm#lcb-ft
One-click install
npx skills add https://github.com/RuddyMoriarty/moriarty-cfo --skill cfo-risques-conformite
Or copy as Structured Prompt for Agentโ–ผ
Please help me install this Agent Skill.
Skill: cfo-risques-conformite
Source: https://github.com/RuddyMoriarty/moriarty-cfo/tree/main/cfo-risques-conformite
Command: npx skills add https://github.com/RuddyMoriarty/moriarty-cfo --skill cfo-risques-conformite

SYSTEM DOCUMENTATION & REQUIREMENTS

๐Ÿ’ก This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Helps CFOs and accountants identify, prioritise and remediate operational and regulatory risks so organisations are audit-ready and compliant with French frameworks. It reduces manual effort in producing risk maps, control testing checklists, LCB-FT documentation, audit preparation bundles and business continuity plans.

Core Features & Use Cases

  • COSO ERM cartography: guided 5ร—5 probability ร— impact matrices, top-10 prioritisation and KRI proposals.
  • Control internal & testing: narratives, RACI, test sampling and remediation tracking for findings.
  • LCB-FT & KYC: templates and procedures to assess AML exposure and produce TRACFIN-ready evidence.
  • Audit (CAC) coordination: checklists, dossier de travail guidance, findings remediation and affirmation letters.
  • BCP & insurance: BCP templates (ISO 22301), insurance mapping and renewal checklist.
  • Regulatory monitoring: scheduled veille outputs (weekly/monthly/annual) and payloads for task scheduling.

Quick Start

Generate a COSO ERM 5x5 risk matrix from private/company.json and private/calendar-fiscal.json, output the top 10 risks with owners, proposed remediation actions and suggested KRIs.

Frequently Asked Questions about cfo-risques-conformite

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a COSO ERM 5x5 risk matrix for audit preparation?โ–ผ

To generate a COSO ERM 5x5 risk matrix, the Skill analyzes your on-disk company files to map and prioritize operational risks, outputting top-10 risk lists with owners, remediation plans, and KRI proposals in HTML, JSON, and Markdown formats.

What is included in LCB-FT checks for French SME compliance?โ–ผ

LCB-FT checks for French SMEs include assessing anti-money laundering exposure and producing TRACFIN-ready evidence using provided templates and procedures to ensure regulatory compliance.

Can I use this Skill for CAC audit preparation and business continuity planning?โ–ผ

Yes, you can use this Skill for CAC audit preparation and business continuity planning. It provides audit checklists, dossier de travail guidance, and ISO 22301 BCP templates to ensure audit readiness and operational resilience.

How do I schedule regulatory monitoring outputs for compliance tracking?โ–ผ

You can schedule regulatory monitoring outputs by generating scheduler payloads for weekly, monthly, or annual veille tasks. The Skill creates scheduled outputs to track compliance deadlines and regulatory changes automatically.

Does this risk mapping tool work with local company files without external integrations?โ–ผ

Yes, this risk mapping tool works solely with on-disk company files like private JSON data. It runs local scripts to process your data without requiring external API integrations or cloud connectivity.

What formats are supported for exporting internal control testing results?โ–ผ

Internal control testing results can be exported as HTML, JSON, and Markdown artifacts. The Skill generates these formats locally to document control narratives, RACI matrices, test sampling, and remediation tracking.

Related Skills

Explore More Legal & Compliance Skillsโ†’
aqwsde321aqwsde321

company-to-json

Convert company posting text into structured company.json files.

Community
Intermediate
theandyalvarez7-rubytheandyalvarez7-ruby

isms-audit-expert

Generate risk-based ISO 27001 audit plans with Python scheduling and markdown outputs.

Community
Advanced
judicialmindjudicialmind
18

compliance-tracking

Track regulatory obligations and filing deadlines across multiple jurisdictions.

Official
Advanced
belokonmbelokonm
8

risk-manager

Automates enterprise risk assessment, quantitative VaR/Monte Carlo modeling, and governance dashboards.

Community
Advanced