Skip to content

Risk

6 skills in this category.

ICT risk framework checkUse this skill when a bank, payment or e-money institution, investment firm, insurer, crypto-asset service provider or other financial entity in scope of DORA needs to know whether its ICT risk…RiskDORATristan Roth
Risk acceptance memoUse this skill when a risk owner wants to accept a residual risk instead of treating it further, or when someone asks "write a risk acceptance", "we want to accept this risk", "risk exception form"…RiskGeneral, ISO 27001, DORATristan Roth
Risk method draftingUse this skill when a company needs a written risk assessment method before it builds or rescores a register, or when the current method produces registers where everything scores 3. Triggers: "write…RiskISO 27001, ISO 27701, ISO 42001, DORA, GeneralTristan Roth
Risk register first passUse this skill when a team needs its first information security risk register, or has one that is a copied catalogue nobody owns, and asks "build our risk register", "draft a risk assessment", "what…RiskISO 27001, SOC 2, NIS 2, DORA, GeneralTristan Roth
Risk register hygiene reviewUse this skill when an existing risk register needs a check before an audit, a management review or a new owner takes it over, or when someone asks "clean up our risk register", "is our risk register…RiskGeneral, ISO 27001, SOC 2Tristan Roth
Risk treatment plan draftingUse this skill when a risk register has treatment decisions but no plan anyone can execute, or when someone asks "write the risk treatment plan", "turn the risk register into actions", "what do we do…RiskISO 27001, SOC 2, GeneralTristan Roth