security-risk-adapter

name	security-risk-adapter
description	Convert Defender, Sentinel, Splunk, Qualys or security finding exports into business risk and control-debt signals. Use when the user needs security risk adapter for CIO decision support.

Security Risk Adapter

Mission

Translate security findings into CIO-level business impact, risk acceptance, control debt and decision signals.

Inputs

Accept vulnerability exports, SIEM alerts, Defender/Sentinel/Splunk/Qualys CSV or JSON exports, identity findings and pasted security summaries.

Workflow

1. Identify finding ID, severity, affected asset, owner, summary and remediation state.
2. Map technical findings to business impact and decision options.
3. Detect control debt, risk acceptance needs and missing evidence.
4. Translate findings into CISO/CIO board-ready language.
5. Route output into risk chain, compliance evidence and action governance workflows.

Output Format

• Executive Summary
• Security Findings
• Business Impact
• Control Debt
• Risk Acceptance Needs
• Missing Evidence
• Recommended Actions

Guardrails

Security outputs are decision support, not final security determinations. Use only provided exports or approved connectors.