risk-assessment

Anthropic ｜ 商業與營運 ｜ 原文 ｜ Apache-2.0

辨識並評估營運風險，產出有優先順序的風險登記表

---
name: risk-assessment
description: 找出、評估並降低營運風險。當使用者說「what are the risks」、「risk assessment」、「risk register」、「what could go wrong」，或在評估專案、廠商、流程或決策相關的風險時觸發。
---

# 風險評估

有系統地找出營運風險、評估風險，並規劃降低風險的做法。

## 風險評估矩陣

| | 低衝擊 | 中衝擊 | 高衝擊 |
|---|-----------|---------------|-------------|
| **高可能性** | 中 | 高 | 嚴重 |
| **中可能性** | 低 | 中 | 高 |
| **低可能性** | 低 | 低 | 中 |

## 風險類別

- **營運**：流程失靈、人力缺口、系統中斷
- **財務**：預算超支、廠商漲價、營收衝擊
- **法遵**：違反法規、稽核發現、違反政策
- **策略**：市場變化、競爭威脅、技術轉變
- **聲譽**：客戶衝擊、社會觀感、夥伴關係
- **資安**：資料外洩、存取控制失效、第三方弱點

## 風險登記表格式

每一項風險都要記錄：
- **Description（描述）**：可能發生什麼事
- **Likelihood（可能性）**：High / Medium / Low
- **Impact（衝擊）**：High / Medium / Low
- **Risk Level（風險等級）**：Critical / High / Medium / Low
- **Mitigation（緩解措施）**：我們正在做什麼來降低可能性或衝擊
- **Owner（負責人）**：誰負責管理這項風險
- **Status（狀態）**：Open / Mitigated / Accepted / Closed

## 輸出

產出有優先順序的風險登記表，附上具體、可執行的緩解措施。聚焦在可控且重大的風險。

---
name: risk-assessment
description: Identify, assess, and mitigate operational risks. Trigger with "what are the risks", "risk assessment", "risk register", "what could go wrong", or when the user is evaluating risks associated with a project, vendor, process, or decision.
---

# Risk Assessment

Systematically identify, assess, and plan mitigations for operational risks.

## Risk Assessment Matrix

| | Low Impact | Medium Impact | High Impact |
|---|-----------|---------------|-------------|
| **High Likelihood** | Medium | High | Critical |
| **Medium Likelihood** | Low | Medium | High |
| **Low Likelihood** | Low | Low | Medium |

## Risk Categories

- **Operational**: Process failures, staffing gaps, system outages
- **Financial**: Budget overruns, vendor cost increases, revenue impact
- **Compliance**: Regulatory violations, audit findings, policy breaches
- **Strategic**: Market changes, competitive threats, technology shifts
- **Reputational**: Customer impact, public perception, partner relationships
- **Security**: Data breaches, access control failures, third-party vulnerabilities

## Risk Register Format

For each risk, document:
- **Description**: What could happen
- **Likelihood**: High / Medium / Low
- **Impact**: High / Medium / Low
- **Risk Level**: Critical / High / Medium / Low
- **Mitigation**: What we're doing to reduce likelihood or impact
- **Owner**: Who is responsible for managing this risk
- **Status**: Open / Mitigated / Accepted / Closed

## Output

Produce a prioritized risk register with specific, actionable mitigations. Focus on risks that are controllable and material.