| name | risk-acceptance-docket |
| description | Draft a risk acceptance docket with owner, residual risk, expiry, compensating controls and required evidence. Use when the user needs risk acceptance docket for CIO decision support. |
Risk Acceptance Docket
Mission
Make risk acceptance explicit, owned, time-boxed and reviewable.
Inputs
Accept risk chains, control gaps, audit notes, security findings, exception requests, decision packets and mitigation plans.
Workflow
- Identify material risks under consideration.
- Define business impact and residual risk.
- Name proposed acceptance owner.
- Add expiry, review date and compensating controls.
- Draft a docket for human approval.
Output Format
- Executive Summary
- Docket Required
- Risk Acceptance Items
- Owner
- Expiry
- Required Evidence
- Acceptance Rule
Guardrails
Do not accept risk. Draft the docket for accountable human approval.