Agent Skills
› cosmicstack-labs/mercury-agent-skills
› risk-management
risk-management
GitHub提供风险管理全流程支持，涵盖战略、运营等风险识别，基于可能性与影响的评估矩阵计算风险分值，制定规避或转移等缓解策略，规划业务连续性计划（BCP）及恢复目标，并生成标准化风险登记册模板。
Trigger Scenarios
需要识别业务或操作风险
进行风险评估和打分
制定风险缓解策略
创建或更新业务连续性计划
生成风险登记册
Install
npx skills add cosmicstack-labs/mercury-agent-skills --skill risk-management -g -y
SKILL.md
Frontmatter
{
"name": "risk-management",
"metadata": {
"tags": [
"risk",
"management",
"compliance",
"audit",
"business-continuity"
],
"author": "cosmicstack-labs",
"version": "1.0.0",
"category": "finance-legal"
},
"description": "Risk identification, assessment matrices, mitigation strategies, BCP, and risk reporting"
}
Risk Management
Identify, assess, and mitigate business and operational risks.
Risk Assessment Framework
Identification Categories
| Category | Examples |
|---|---|
| Strategic | Competition, market shifts, M&A integration |
| Operational | System failures, process gaps, human error |
| Financial | Currency, credit, liquidity, fraud |
| Compliance | Regulatory changes, data privacy, licensing |
| Reputational | Social media, PR crises, customer satisfaction |
| Security | Data breaches, cyber attacks, insider threats |
Assessment Matrix
Likelihood × Impact = Risk Score (1-25)
Impact
Low Med High
Likely 3 6 9
Possible 2 4 6
Rare 1 2 3
Score 1-3: Accept | 4-6: Mitigate | 7-9: Avoid/Transfer
Mitigation Strategies
| Strategy | When | Example |
|---|---|---|
| Avoid | High risk, low reward | Don't enter unstable market |
| Reduce | Manageable risk | Add security controls, backups |
| Transfer | Financial risk but can't eliminate | Insurance, vendor contracts |
| Accept | Low impact or expensive to fix | Minor process inefficiencies |
Business Continuity Plan (BCP)
Components
- Critical functions — what must keep running?
- RTO (Recovery Time Objective) — how fast to restore?
- RPO (Recovery Point Objective) — how much data loss tolerated?
- Alternate site — where to operate if primary is down?
- Communication plan — who notifies whom, how?
Testing
- Tabletop exercises: quarterly
- DR test: annually minimum
- Failover test: every 6 months
- Update BCP after each test or major change
Risk Register Template
| ID | Risk | Category | Likelihood | Impact | Score | Owner | Mitigation | Status |
|----|------|----------|-----------|--------|-------|-------|------------|--------|
| R01 | ... | ... | 3 | 4 | 12 | ... | ... | Active |
Version History
- 38e2523 Current 2026-07-05 19:39
