Load context
On first use: Read ../../CLAUDE.md to obtain scenario-level configuration (risk appetite/risk tolerance/strategic context).
/strategic-risk-assessment — Strategic Risk Assessment
Examples
→ Example: The user says "Annual strategic review, need to do an assessment update on the main strategic risks," and the system should invoke this skill to perform the annual strategic risk assessment update.
→ Example: The user says "What are the main risks of entering a new market? Help me do a systematic assessment," and the system should invoke this skill to assess market entry risks according to the strategic risk framework.
→ Example: The user says "The risk of losing major customers is rising; help me assess the impact on the 3-year plan," and the system should invoke this skill to perform a customer concentration risk assessment.
Step 1: Risk Identification
Risk source classification framework:
□ 宏观风险:
→ 经济风险:[GDP/通胀/汇率/利率]
→ 政策风险:[监管/税收/产业/贸易]
→ 地缘风险:[区域冲突/制裁/供应链]
□ 行业风险:
→ 市场风险:[需求/供给/价格]
→ 技术风险:[颠覆性创新/技术路线]
→ 竞争风险:[新进入者/替代品/竞争对手]
□ 内部能力风险:
→ 资金链风险:[融资/流动性]
→ 人才风险:[关键人才/组织能力]
→ 执行风险:[战略执行/运营效率]
Risk identification methods:
□ 信息来源:
→ PEST 分析:[已完成/需更新/未执行]
→ 波特五力分析:[已完成/需更新/未执行]
→ 内部分析(能力/资源):[已完成/需更新/未执行]
→ 历史风险事件:[列表]
□ 参与人员:
→ 高管访谈:[已完成/计划中]
→ 业务单元反馈:[已完成/计划中]
→ 外部顾问意见:[已完成/计划中]
Step 2: Risk Assessment
Risk rating matrix:
风险值 = 影响度 × 可能性
影响度(1-5):
1 = 轻微(< [X] 万,战略影响微弱)
3 = 中等([X-X] 万,部分战略目标受影响)
5 = 严重(> [X] 万,战略目标无法实现)
可能性(1-5):
1 = 极低(< 5%,基本不会发生)
3 = 中等(20-40%,有一定可能)
5 = 极高(> 80%,很可能发生)
风险等级:
15-25:🔴 重大风险(须立即应对)
8-14:🟡 中等风险(须监控和应对)
1-7:⚪ 低风险(可接受或监控)
Risk assessment results:
| # | 风险描述 | 类别 | 影响度 | 可能性 | 风险值 | 等级 |
|---|---------|------|--------|--------|--------|------|
| 1 | [描述] | [宏观] | [5] | [4] | [20] | 🔴 |
| 2 | [描述] | [行业] | [3] | [4] | [12] | 🟡 |
| 3 | [描述] | [能力] | [4] | [2] | [8] | 🟡 |
□ 高风险项(风险值 ≥ 15):[X] 项
□ 中风险项(风险值 8-14):[X] 项
□ 低风险项(风险值 < 8):[X] 项
Step 3: Risk Response Strategies
Risk response options:
□ 规避(Avoid):退出该业务/市场,消除风险源
□ 转移(Transfer):保险/对冲/分包/合资
□ 减轻(Reduce):采取措施降低影响或可能性
□ 接受(Accept):acknowledged 风险,准备应急计划
Response plans for high-risk items:
□ 风险 1:[描述]
→ 当前风险值:[20](🔴 重大)
→ 建议应对策略:[减轻]
→ 具体措施:
· [措施1] — 责任人 [X] — 完成 [日期]
· [措施2] — 责任人 [X] — 完成 [日期]
→ 预期效果:风险值从 [20] 降至 [12]
→ 残余风险:[X](措施后的残余值)
□ 风险 2:[描述]
→ ...
Risk tolerance check:
□ 风险容忍度定义:
→ 财务风险容忍度:[X](最大可接受风险值)
→ 战略风险容忍度:[X]
→ 合规风险容忍度:[X]
□ 超容忍度风险:[X] 项
→ [风险名称] — 风险值 [X] vs 容忍度 [X]
Step 4: Risk Monitoring Mechanism
Risk monitoring indicators:
□ 关键风险指标(KRI):
| 风险 | 监控指标 | 当前值 | 预警阈值 | 触发条件 |
|------|---------|--------|---------|---------|
| [风险1] | [指标] | [X] | [X] | [条件] |
| [风险2] | [指标] | [X] | [X] | [条件] |
Risk reporting mechanism:
□ 风险报告频率:[每季度/每半年]
□ 报告对象:[董事会/战略委员会/管理层]
□ 触发事件报告:[是/否] — 触发条件 [描述]
□ 风险责任人:[岗位/角色]
Step 5: Generate Risk Assessment Report
═══════════════════════════════════════
战略风险评估报告
评估范围:[全公司/业务]
评估周期:[YYYY]
报告日期:[YYYY-MM-DD]
═══════════════════════════════════════
【风险概览】
□ 识别风险总数:[X] 项
□ 🔴 重大风险:[X] 项
□ 🟡 中等风险:[X] 项
□ ⚪ 低风险:[X] 项
【风险分布】
□ 宏观风险:[X] 项
□ 行业风险:[X] 项
□ 竞争风险:[X] 项
□ 内部能力风险:[X] 项
【高风险项及应对】
🔴 风险 1:[描述]
□ 影响度:[5] | 可能性:[4] | 风险值:[20]
□ 应对策略:[减轻/规避/转移/接受]
□ 主要措施:
1. [措施1] — 责任人 [X]
2. [措施2] — 责任人 [X]
□ 预期残余风险:[12]
🟡 风险 2:[描述]
□ ...
【风险容忍度】
□ 超容忍度风险:[X] 项 — [列表]
□ 整体风险敞口:[在容忍度内/超出容忍度]
【风险趋势】
□ vs 上期新增风险:[X] 项
□ vs 上期消除/降低风险:[X] 项
□ 整体风险水平趋势:[上升/下降/持平]
【重点监控】
□ 监控频率:[季度/月度]
□ 下次评估日期:[YYYY-MM-DD]
═══════════════════════════════════════
置信度:[✅ 高 / ⚠️ 中 / 🔴 低]
整体风险等级:[🔴 高风险 / 🟡 中风险 / ⚪ 低风险]
═══════════════════════════════════════
Escalation trigger conditions
- Number of high-risk items (risk value ≥ 15) > [X] items
- Any risk breaches tolerance (must be reported immediately)
- A risk event occurs (accident/loss/policy change)
- Risk trend continues to deteriorate (rising for [X] consecutive periods)
- Emergency reserves must be used or the crisis management process must be initiated
- Major risk response measures fail to be executed as planned
Finance Skills — strategic-risk-assessment atomic skill