risk-assessment

Identify operational risks and generate a scored risk register with mitigation owners.

Updated Apr 25, 2026
One-click install
npx skills add https://github.com/nmoralescyber/claude-skill-optimization --skill risk-assessment-nmoralescyber
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: risk-assessment
Source: https://github.com/nmoralescyber/claude-skill-optimization/tree/main/skills/operations/risk-assessment
Command: npx skills add https://github.com/nmoralescyber/claude-skill-optimization --skill risk-assessment-nmoralescyber

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Operational teams struggle to consistently identify, quantify, and plan mitigations for risks that threaten system reliability, vendor continuity, capacity planning, process execution, and security incident response.

Core Features & Use Cases

  • Risk identification across outages, vendor/third-party failures, capacity constraints, process breakdowns, and execution risk for initiatives.
  • Quantitative scoring using Likelihood × Impact and production-ready risk registers with owners and mitigations.
  • Use Case: Build a risk register for a major launch or migration, assign owners, and outline mitigations to prevent outages.

Quick Start

Identify operational risks for your initiative and generate a risk register with scoring and mitigations.

Frequently Asked Questions about risk-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a risk register for a system migration?

A risk register for system migrations identifies execution risks, scores them using Likelihood × Impact, and assigns concrete mitigation owners. This structured approach tracks outages, capacity shortfalls, and execution failures to prevent launch disruptions.

What is the best way to score operational risks for project launches?

Scoring operational risks for project launches involves applying a quantitative Likelihood × Impact matrix to identify execution risks and process breakdowns. This generates a formal register with assigned mitigation owners to track preventive actions.

Can I use this to assess vendor failure and third-party risks?

Yes, assessing vendor failure and third-party risks involves identifying operational risks to vendor continuity, scoring them by Likelihood × Impact, and assigning mitigation owners. This creates a structured register to track vendor-related outages.

How do you quantify security incident response risks in a risk register?

Quantifying security incident response risks requires identifying operational risks from process breakdowns and scoring them via Likelihood × Impact. This produces a structured risk register with concrete mitigation owners to track remediation efforts.

Does this risk assessment process handle capacity constraints and outages?

Yes, the risk assessment process handles capacity constraints and outages by identifying them as operational risks, applying a Likelihood × Impact score to each scenario, and tracking concrete mitigations with assigned owners in a formal register.

When do I need a formal risk register for operational risk management?

A formal risk register for operational risk management is needed during major launches, migrations, or system changes. It identifies outages and vendor failures, applies Likelihood × Impact scores, and assigns mitigation owners to track preventive actions.