Incident Severity & Response

What it works from

• Risk registers, control descriptions and policy documents
• Your scoring scales, thresholds and appetite statements

What you get back

• A scored register with the reasoning per risk
• An aggregated view at the level the committee reads

Why this is expensive by hand

Assessing the risk universe in scope by hand means every assessor scores slightly differently and the register stops being comparable. Comparable registers is the typical trigger — score every risk identically, so results hold up across teams, entities and quarters. Done properly it is defensible; done at pace it becomes a judgement call nobody can retrace. And "properly" usually means 1–2 hours of manual work.

How this Skill produces it

As a Skill, the work is already sequenced. You bring the evidence, and the run produces a scored register with the reasoning per risk plus an aggregated view at the level the committee reads. The criteria, ordering and review points that make the answer trustworthy are encoded in the Skill itself — which is the difference between a structured method and a prompt someone pastes in. In effect, 1–2 hours of senior time compresses into ~5 minutes — and the output is comparable across clients, quarters and colleagues instead of shaped by whoever ran it.