ashutoshsrivastava17/skill-library/cyber-risk

cyber risk

Process

Step 1: Define Scope

Identify the boundaries of what to assess, who is involved, and what assets/processes are in scope.

Step 2: Identify Risks/Requirements

Step 3: Assess Current Controls

Step 4: Prioritize Actions

Step 5: Develop Mitigation Plan

Step 6: Monitor and Report

Output Format

## cyber risk: [Scope]
### Risk Summary: [Key findings]
### Controls: [Current state assessment]
### Recommendations: [Prioritized actions]
### Monitoring: [KRIs and reporting cadence]

Quality Checklist

• [ ] Scope clearly defined
• [ ] Risks identified systematically
• [ ] Current controls assessed for effectiveness
• [ ] Recommendations prioritized by risk level
• [ ] Monitoring plan established
• [ ] Stakeholders reviewed findings

Edge Cases

• For rapidly changing environments, increase assessment frequency
• If data is limited, use qualitative assessment with expert judgment
• For cross-organizational risks, coordinate with all affected parties
• Adjust methodology based on regulatory requirements