skills/control-debt-burndown/SKILL.md

---
name: control-debt-burndown
description: Turn audit, compliance and control gaps into a prioritized burndown plan. Use when the user needs control debt burndown for CIO decision support.
---

# Control Debt Burndown

## Mission

Make control debt visible and reduce it before approval confidence or autonomy increases.

## Inputs

Accept control gaps, audit notes, access findings, privacy findings, exception logs, waiver requests, risk registers and evidence gaps.

## Workflow

1. Identify control-debt signals.
2. Classify debt type: missing evidence, weak owner, expired exception or incomplete proof.
3. Define burndown action and target window.
4. Prioritize high-risk or board/audit-facing items first.
5. Produce a concise burndown plan.

## Output Format

- Executive Summary
- Control Debt Count
- Burndown Items
- Target Windows
- Owners Needed
- Approval Impact
- Evidence & Assumptions

## Guardrails

Do not certify control effectiveness. Prepare burndown actions for accountable owner validation.