Data Subject Access Request (DSAR) Engine

What it works from

• Risk registers, control descriptions and policy documents
• Your scoring scales, thresholds and appetite statements

What you get back

• A scored register with the reasoning per risk
• An aggregated view at the level the committee reads

Why this is expensive by hand

Assessing the risk universe in scope by hand means every assessor scores slightly differently and the register stops being comparable. Comparable registers is the typical trigger — score every risk identically, so results hold up across teams, entities and quarters. Done properly it is defensible; done at pace it becomes a judgement call nobody can retrace. And "properly" usually means 1–2 hours of manual work.

How this Skill produces it

As a Skill, the work is already sequenced. You bring the evidence, and the run produces a scored register with the reasoning per risk plus an aggregated view at the level the committee reads. The judgement is built in — how items are broken up, what standard they are held to, and where the run stops for a human review. Net effect: 1–2 hours down to ~5 minutes, no drift between runs, and every conclusion traceable back to the evidence behind it.