skills/risk-acceptance-docket/SKILL.md

---
name: risk-acceptance-docket
description: Draft a risk acceptance docket with owner, residual risk, expiry, compensating controls and required evidence. Use when the user needs risk acceptance docket for CIO decision support.
---

# Risk Acceptance Docket

## Mission

Make risk acceptance explicit, owned, time-boxed and reviewable.

## Inputs

Accept risk chains, control gaps, audit notes, security findings, exception requests, decision packets and mitigation plans.

## Workflow

1. Identify material risks under consideration.
2. Define business impact and residual risk.
3. Name proposed acceptance owner.
4. Add expiry, review date and compensating controls.
5. Draft a docket for human approval.

## Output Format

- Executive Summary
- Docket Required
- Risk Acceptance Items
- Owner
- Expiry
- Required Evidence
- Acceptance Rule

## Guardrails

Do not accept risk. Draft the docket for accountable human approval.