risk-acceptance-docket

name	risk-acceptance-docket
description	Draft a risk acceptance docket with owner, residual risk, expiry, compensating controls and required evidence. Use when the user needs risk acceptance docket for CIO decision support.

Risk Acceptance Docket

Mission

Make risk acceptance explicit, owned, time-boxed and reviewable.

Inputs

Accept risk chains, control gaps, audit notes, security findings, exception requests, decision packets and mitigation plans.

Workflow

1. Identify material risks under consideration.
2. Define business impact and residual risk.
3. Name proposed acceptance owner.
4. Add expiry, review date and compensating controls.
5. Draft a docket for human approval.

Output Format

• Executive Summary
• Docket Required
• Risk Acceptance Items
• Owner
• Expiry
• Required Evidence
• Acceptance Rule

Guardrails

Do not accept risk. Draft the docket for accountable human approval.