Risk Assessor

Download SKILL.mdGet Murage How skills work

Open source. macOS, Windows and Linux.

At a glance

What it is

Risk assessment and mitigation expert covering risk identification techniques, probability/impact matrix, risk register, mitigation strategies, risk monitoring, contingency planning, technical risk assessment, and risk communication templates.

A skill is a written procedure a bot loads when a job calls for it. This one is a single file, SKILL.md, and the whole file is on this page.

File: SKILL.md
Length: 539 lines2,944 words, about 14 min read
Category: Business strategystrategy and planning
Level: Advanced
License

More business strategy skills.

The full skill.

The whole file, exactly as it downloads. Read it before you rely on it.

SKILL.md

539 lines · 2,944 words

Download

Risk Assessor

You are an expert Risk Assessor specializing in software project risk management. You help teams identify, analyze, prioritize, mitigate, and monitor risks throughout the project lifecycle. You understand that risk management is not about eliminating all risk -- it is about making informed decisions about which risks to accept, mitigate, or avoid.

Risk Management Process

The Risk Management Lifecycle

Identify → Analyze → Prioritize → Plan Response → Monitor → Review
    ↑                                                          |
    └──────────────── Continuous Feedback Loop ─────────────────┘

Put this skill to work.

Questions.

What is the Risk Assessor skill?

How much does it cost?

Nothing. It ships with Murage, which is open source. Your bots run on the AI plan you already have.

Can I change it?

Yes. Open it in Settings → Skills to read, edit or duplicate it. Skill Guard scans it again after every edit.

Give your first job to Murage.

Download the app, connect the AI you already pay for, and tell your Chief of Staff what needs doing. Plan on about ten minutes from install to a working team.

Download Murage

No account needed · Runs on the AI plan you already pay for

Identify → Analyze → Prioritize → Plan Response → Monitor → Review ↑ | └──────────────── Continuous Feedback Loop ─────────────────┘

┌──────┬─────────────┬──────┬────────┬───────┬──────────────┬────────┬──────────┬────────┐ │ ID │ Description │ Prob │ Impact │ Score │ Response │ Owner │ Status │ Due │ ├──────┼─────────────┼──────┼────────┼───────┼──────────────┼────────┼──────────┼────────┤ │ R001 │ Key dev │ 3 │ 4 │ 12 │ Mitigate: │ Sarah │ Active │ Mar 15 │ │ │ leaves │ │ │ High │ Cross-train │ │ │ │ │ │ mid-project │ │ │ │ second dev │ │ │ │ ├──────┼─────────────┼──────┼────────┼───────┼──────────────┼────────┼──────────┼────────┤ │ R002 │ Vendor API │ 4 │ 3 │ 12 │ Mitigate: │ Mike │ Active │ Feb 28 │ │ │ doesn't │ │ │ High │ POC this │ │ │ │ │ │ meet needs │ │ │ │ sprint │ │ │ │ ├──────┼─────────────┼──────┼────────┼───────┼──────────────┼────────┼──────────┼────────┤ │ R003 │ Database │ 2 │ 5 │ 10 │ Mitigate: │ Alex │ Watching │ Apr 1 │ │ │ can't scale │ │ │ Med │ Load test │ │ │ │ │ │ to target │ │ │ │ early │ │ │ │ ├──────┼─────────────┼──────┼────────┼───────┼──────────────┼────────┼──────────┼────────┤ │ R004 │ Regulatory │ 3 │ 5 │ 15 │ Avoid: │ PM │ Active │ Mar 1 │ │ │ compliance │ │ │ High │ Legal review │ │ │ │ │ │ uncertainty │ │ │ │ in week 1 │ │ │ │ ├──────┼─────────────┼──────┼────────┼───────┼──────────────┼────────┼──────────┼────────┤ │ R005 │ Scope creep │ 4 │ 3 │ 12 │ Mitigate: │ PO │ Active │ Ongoing│ │ │ from sales │ │ │ High │ Change │ │ │ │ │ │ requests │ │ │ │ control proc │ │ │ │ └──────┴─────────────┴──────┴────────┴───────┴──────────────┴────────┴──────────┴────────┘

For each major architectural decision, assess: ┌──────────────────────┬───────────────────────────────────────┐ │ Decision │ Risk Assessment │ ├──────────────────────┼───────────────────────────────────────┤ │ Technology Choice │ - Maturity of the technology │ │ │ - Team's experience with it │ │ │ - Community/vendor support │ │ │ - Lock-in risk │ ├──────────────────────┼───────────────────────────────────────┤ │ Integration Points │ - API stability and documentation │ │ │ - Vendor reliability and SLA │ │ │ - Fallback if integration fails │ │ │ - Data format compatibility │ ├──────────────────────┼───────────────────────────────────────┤ │ Scalability │ - Expected load vs. current capacity │ │ │ - Scaling approach (horizontal/vert) │ │ │ - Bottleneck identification │ │ │ - Cost of scaling │ ├──────────────────────┼───────────────────────────────────────┤ │ Security │ - Authentication/authorization model │ │ │ - Data encryption requirements │ │ │ - Compliance requirements (GDPR, etc) │ │ │ - Attack surface analysis │ ├──────────────────────┼───────────────────────────────────────┤ │ Data │ - Data migration complexity │ │ │ - Data integrity constraints │ │ │ - Backup and recovery requirements │ │ │ - Data volume growth projections │ └──────────────────────┴───────────────────────────────────────┘

Risk Assessor

More business strategy skills.

The full skill.

Risk Assessor

Risk Management Process

The Risk Management Lifecycle

Put this skill to work.

Questions.

Give your first job to Murage.

Search murage.ai

Risk Assessor

More business strategy skills.

The full skill.

Risk Assessor

Risk Management Process

The Risk Management Lifecycle

Put this skill to work.

Questions.

Give your first job to Murage.

Create a bot and use this skill.

Ask Ember to create the bot

Open the bot’s skills

Find Risk Assessor and switch it on

Ask the bot for the job

About this skill.

Risk vs. Issue

Risk Identification Techniques

1. Brainstorming Workshop

2. Pre-Mortem Analysis

3. Checklist-Based Identification

4. SWOT Analysis (for Strategic Projects)

Probability/Impact Matrix

The 5x5 Matrix

Scoring System

Risk Register

Risk Register Template

Risk Register Best Practices

Risk Response Strategies

The Four Response Types

Response Selection Decision Tree

Technical Risk Assessment

Architecture Risk Analysis

Technical Spike as Risk Mitigation

Common Technical Risks and Mitigations

Contingency Planning

Contingency Plan Template

Risk Monitoring

Risk Dashboard

Risk Review Cadence

Risk Communication Templates

Risk Update for Stakeholders

Risk Summary for Executive Presentations

Risk Anti-Patterns

Patterns to Avoid

Quick Decision Guide

When to Use

Output Format

Example

Edge Cases