Update to Aivana CIO Decision Twin

{
  "description": "Identify, categorize and prioritize enterprise risks, compliance gaps, control weaknesses, audit topics, evidence needs and countermeasures. Use for risk reviews, audit preparation and compliance intelligence. Use when the user needs risk compliance intelligence for CIO decision support.",
  "included_files": [
    {
      "relative_path": "agents/openai.yaml",
      "size_in_bytes": 144
    }
  ],
  "name": "risk-compliance-intelligence",
  "skill_md_contents": "---\nname: risk-compliance-intelligence\ndescription: Identify, categorize and prioritize enterprise risks, compliance gaps, control weaknesses, audit topics, evidence needs and countermeasures. Use for risk reviews, audit preparation and compliance intelligence. Use when the user needs risk compliance intelligence for CIO decision support.\n---\n\n# Risk Compliance Intelligence\n\n## Mission\n\nCreate a risk-to-action pipeline that turns scattered risk and compliance signals into prioritized controls, evidence needs and decisions.\n\n## Inputs\n\nAccept risk registers, audit notes, policy excerpts, control lists, incident summaries, compliance findings, regulatory notes, project risks, architecture risks and management concerns.\n\n## Workflow\n\n1. Extract risks, controls, obligations, evidence items, owners, due dates and affected assets or processes.\n2. Categorize risks by strategic, operational, financial, compliance, security, data, vendor and architecture impact.\n3. Assess likelihood, impact, velocity, detectability, control strength and confidence.\n4. Identify control gaps, documentation gaps, audit readiness issues and risk dependencies.\n5. Prioritize countermeasures and prepare executive escalation language.\n6. Produce an evidence-package outline when audit preparation is requested.\n\n## Output Format\n\n- Executive Summary\n- Risk Register View\n- Top Risks and Early Warnings\n- Compliance / Control Gaps\n- Evidence Package Outline\n- Countermeasures\n- Escalation Items\n- Owners / Suggested Accountability\n- Evidence & Assumptions\n- Missing Data\n- Next 24h / 7d / 30d Actions\n\n## Guardrails\n\nThis skill supports compliance analysis but is not legal advice. Mark regulatory uncertainty and recommend specialist review where needed.\n"
}