risk-register-builder

# Risk Register Builder

## Overview

The Risk Register Builder skill provides specialized capabilities for creating and maintaining comprehensive risk registers. This skill enables systematic risk identification, assessment, mitigation planning, and ongoing tracking for projects and change initiatives.

## Capabilities

### Risk Identification Checklists
- Create risk identification checklists by category
- Apply standard risk taxonomies
- Generate role-specific risk prompts
- Compile risks from multiple sources

### Risk Score Calculation
- Calculate risk scores using probability x impact
- Apply consistent scoring scales
- Weight risks by category importance
- Generate composite risk ratings

### Risk Matrix and Heat Map Generation
- Generate risk matrices with quadrant placement
- Create visual heat maps
- Show risk distribution patterns
- Enable portfolio risk views

### Mitigation Strategy Templates
- Create mitigation strategy templates
- Apply the 4 T's: Treat, Transfer, Tolerate, Terminate
- Define response actions
- Assign mitigation owners

### Trigger Event Tracking
- Track risk status and trigger events
- Define early warning indicators
- Monitor risk conditions
- Activate response plans

### Risk Exposure Calculation
- Calculate risk exposure (probability x impact x cost)
- Determine contingency requirements
- Aggregate portfolio exposure
- Track exposure trends

### Risk Governance Reports
- Generate risk reports for governance
- Create executive risk summaries
- Produce trend analysis reports
- Support audit requirements

## Usage

### Create Risk Register
```
Create a risk register for:
Project/Initiative: [Description]
Categories: [Risk categories to cover]

Include identification, assessment, and mitigation.
```

### Score Risks
```
Score these identified risks:
[Risk list]

Calculate risk scores and prioritize.
```

### Develop Mitigations
```
Develop mitigation strategies for these high risks:
[High-risk list]

Apply 4 T's framework and assign owners.
```

### Generate Risk Report
```
Generate a risk report for governance review:
[Risk register data]

Include summary, trends, and recommendations.
```

## Process Integration

This skill integrates with the following business analysis processes:
- business-case-development.js - Business case risk assessment
- solution-options-analysis.js - Option risk evaluation
- change-management-strategy.js - Change initiative risks
- consulting-engagement-planning.js - Engagement risk management

## Dependencies

- Risk templates and taxonomies
- Scoring algorithms
- Visualization libraries
- Reporting frameworks

## Risk Management Reference

### Risk Register Template
```
RISK REGISTER
Project: [Name] | Owner: [Name] | Last Updated: [Date]

| ID | Risk | Category | Probability | Impact | Score | Owner | Mitigation | Status |
|----|------|----------|-------------|--------|-------|-------|------------|--------|
| R1 | [Description] | [Cat] | [1-5] | [1-5] | [P*I] | [Name] | [Action] | [Status] |
```

### Risk Categories (Typical)
| Category | Description | Examples |
|----------|-------------|----------|
| Technical | Technology-related risks | Integration failure, performance issues |
| Schedule | Timeline-related risks | Delays, dependencies |
| Resource | People/skill-related risks | Key person dependency, skill gaps |
| Financial | Cost-related risks | Budget overrun, funding changes |
| External | External factor risks | Vendor failure, regulatory changes |
| Organizational | Internal org risks | Sponsor change, competing priorities |
| Change Management | People change risks | Resistance, adoption failure |

### Probability Scale
| Score | Level | Description | Percentage |
|-------|-------|-------------|------------|
| 5 | Almost Certain | Expected to occur | >90% |
| 4 | Likely | Probably will occur | 70-90% |
| 3 | Possible | May occur | 30-70% |
| 2 | Unlikely | Could occur | 10-30% |
| 1 | Rare | Unlikely to occur | <10% |

### Impact Scale
| Score | Level | Description | Impact |
|-------|-------|-------------|--------|
| 5 | Catastrophic | Project failure | >$1M or critical |
| 4 | Major | Significant impact | $500K-$1M |
| 3 | Moderate | Noticeable impact | $100K-$500K |
| 2 | Minor | Small impact | $10K-$100K |
| 1 | Negligible | Minimal impact | <$10K |

### Risk Matrix
```
Impact →       1       2       3       4       5
Probability ↓  Neg.   Minor   Mod.   Major   Cat.
    5          5      10      15      20      25
    4          4       8      12      16      20
    3          3       6       9      12      15
    2          2       4       6       8      10
    1          1       2       3       4       5

Legend: Low (1-4), Medium (5-9), High (10-14), Critical (15-25)
```

### The 4 T's - Response Strategies
| Strategy | Description | When to Use |
|----------|-------------|-------------|
| Treat | Take action to reduce P or I | Can reduce risk cost-effectively |
| Transfer | Shift to third party | Insurance, contracts, outsourcing |
| Tolerate | Accept and monitor | Low impact or cannot mitigate |
| Terminate | Avoid the risk entirely | Risk too high, alternatives exist |

### Risk Status Values
| Status | Description |
|--------|-------------|
| Identified | Risk documented but not yet assessed |
| Open | Assessed and being monitored |
| In Mitigation | Mitigation actions underway |
| Triggered | Risk event has occurred |
| Closed | Risk no longer applicable |

### Risk Reporting Template
```
RISK SUMMARY REPORT
Report Date: [Date] | Period: [Period]

EXECUTIVE SUMMARY:
- Total risks: [#]
- Critical risks: [#]
- High risks: [#]
- New this period: [#]
- Closed this period: [#]

TOP RISKS:
1. [Risk 1] - Score: [X] - Status: [Status]
2. [Risk 2] - Score: [X] - Status: [Status]
3. [Risk 3] - Score: [X] - Status: [Status]

TRENDS:
[Chart showing risk count over time]

TRIGGERED RISKS:
[Any risks that materialized]

RECOMMENDED ACTIONS:
1. [Action 1]
2. [Action 2]
```