“risk-management”的搜索结果

Organize ISO evidence for medical devices and laboratories, including controlled documents, risk records, corrective actions, and supplier controls. Produce structured gap reports for authorized human review while keeping certification, accreditation, and regulatory processes distinct.

中文简介正在准备中。当前显示英语简介。

• Organize controlled documents and implementation records
• Check links in medical-device risk and design records
• Review corrective-action and supplier-control evidence

Build dashboards that show how long vulnerabilities remain unresolved and compare remediation times with severity-based deadlines. Define response policies, automate escalation notices, and report compliance rates and other measures of remediation progress.

中文简介正在准备中。当前显示英语简介。

• Define vulnerability remediation deadlines
• Visualize overdue vulnerabilities
• Automate reminders and management escalations

Assess cybersecurity risks using NIST SP 800-30 Rev 1 by examining threats, weaknesses, likelihood, and business impact. Produce a ranked risk register, a structured record of risks and recommended responses, with a summary for leadership.

中文简介正在准备中。当前显示英语简介。

• Preparing documented risk analysis for compliance frameworks
• Assessing a new system before launch
• Reporting the highest risks to leadership

Supports medical device risk management from planning through post-market review using ISO 14971:2019. Helps identify hazards, evaluate risks, select and verify controls, assess remaining risks, and maintain records as new information arrives.

中文简介正在准备中。当前显示英语简介。

• Create a medical device risk management plan
• Identify hazards and choose risk analysis methods
• Compare risk controls and assess remaining risks

Support stock and cryptocurrency analysis with reference formulas for price indicators, position sizing, and risk measures. The skill also covers financial data sources and Alpaca API operations, including market data retrieval, order management, and paper trading.

中文简介正在准备中。当前显示英语简介。

• Comparing price indicators and candlestick patterns
• Calculating position sizes and loss limits
• Exploring paper trading with the Alpaca API

Turn an existing listed-equity investment view into a position size and hedge plan. Compare loss limits, liquidity, protection costs, and smaller positions, then define the exposures to retain and the conditions for changing the plan.

中文简介正在准备中。当前显示英语简介。

• Sizing a stock position against loss and liquidity limits
• Comparing hedges with reducing a position
• Defining triggers to resize or remove protection

Manages delivery risk and cross-team dependencies — identifying, sizing, mitigating and escalating what could stop the work. Use this to build a risk register that gets used, manage dependencies between teams, decide what to escalate and when, or work out why the same risks keep materializing unmanaged.

中文简介正在准备中。当前显示原文说明。

NIST Cybersecurity Framework 2.0 implementation, assessment, and compliance management. Use for CSF 2.0 gap analysis, cybersecurity risk management, maturity assessment, CSF profiles, and cross-framework compliance mapping.

中文简介正在准备中。当前显示原文说明。

Medical device risk management specialist implementing ISO 14971 throughout product lifecycle. Provides risk analysis, risk evaluation, risk control, and post-production information analysis.

中文简介正在准备中。当前显示原文说明。

Governance, risk, and compliance — risk assessment and scoring, control mapping across NIST CSF 2.0 / ISO 27001:2022 / SOC 2 / CIS Controls v8, gap analysis, audit evidence preparation, and security policy generation

中文简介正在准备中。当前显示原文说明。

Apply the NIST AI Risk Management Framework (AI RMF 1.0) and adjacent guidance to AI / ML systems — model lifecycle governance, fairness and bias evaluation, robustness, transparency, accountability, third-party model risk, monitoring for drift, and AI incident response. Broader than prompt-injection (which is the security slice). Use when the user mentions 'AI risk,' 'AI governance,' 'NIST AI RMF,' 'AI compliance,' 'ML governance,' 'model risk management,' 'AI fairness,' 'AI bias,' 'algorithmic accountability,' 'AI Bill of Rights,' 'EU AI Act,' 'AI transparency,' 'model card,' 'AI red team,' 'AI safety,' 'responsible AI,' 'model drift,' 'concept drift,' 'AI monitoring,' 'AI incident,' or needs to assess or govern an AI / ML system.

中文简介正在准备中。当前显示原文说明。

Portfolio-level risk controls, drawdown management, exposure limits, and circuit breakers for crypto trading

中文简介正在准备中。当前显示原文说明。

Conducts HIPAA risk analysis per 45 CFR §164.308(a)(1) following OCR guidance methodology. Covers threat identification, vulnerability assessment, likelihood and impact determination, risk scoring, and mitigation planning for electronic protected health information. Keywords: HIPAA risk analysis, OCR guidance, threat assessment, vulnerability, risk management, ePHI.

中文简介正在准备中。当前显示原文说明。

用户在分析企业风险管理、CEO职责边界，或评估组织是否真正重视风险控制时。 语言信号:"风险管理应该谁来管"/"为什么要CEO亲自管风险"/"风控部门不够吗"/"CEO最大的责任是什么" 不适用于:不涉及组织风险管理的纯投资分析。

中文简介正在准备中。当前显示原文说明。

Insurance policy analysis, claims evaluation, coverage assessment, and risk management for individuals and businesses

中文简介正在准备中。当前显示原文说明。

识别和管理项目风险时使用。适用于项目启动、阶段评审、变更评估。优先使用 PMBOK 风险矩阵 + 缓解方案 + 触发条件。

中文简介正在准备中。当前显示原文说明。

"Enterprise risk management (ERM) framework layer — integrates COSO ERM 2017 (five components, 20 principles), ISO 31000, three-lines model, risk appetite, risk heatmap, and key risk indicators (KRI) into a complete governance playbook covering structure through culture. Use for ERM implementation, risk-system build, risk mapping, risk-appetite statement drafting, three-lines setup, CRO role design, or Taiwan FSC corporate-governance evaluation response. Triggers: 『ERM 導入』『風險管理框架』『COSO』『風險地圖』『風險胃納』『KRI』『CRO 職責』『三道防線』『風險委員會』『ISO 31000』『風險熱圖』『風險治理』. For 師大／政大／陽交 EMBA risk-management/governance/audit cases. Complements Asgard `algo-risk-*` (Altman Z, Benford, credit, VaR) with the framework/governance layer. 獨董挑選/董事會組成/IPO 治理: use `biz-corporate-governance`.".

中文简介正在准备中。当前显示原文说明。

Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify vulnerabilities and predisposing conditions, determine likelihood and impact, compute risk, and communicate results as a prioritized risk register. Use when an organization needs an actual risk *assessment* (not a maturity score), when a control framework (CSF, ISO 27001, RMF, SOC 2, PCI) requires a documented risk analysis as input, when leadership asks "what are our top risks and how bad are they", when assessing risk for a new system or major change, or when building a risk register from scratch. This is the methodology that feeds framework selection, ATO packages, and treatment decisions. Keywords: risk assessment, NIST 800-30, threat modeling, likelihood and impact, risk register, risk analysis, threat sources, vulnerabilities, risk determination, qualitative risk, risk matrix, residual risk, risk treatment.

中文简介正在准备中。当前显示原文说明。

Implement a vulnerability aging dashboard and SLA tracking system to measure remediation performance against severity-based timelines and drive accountability.

中文简介正在准备中。当前显示原文说明。

Knowledge base from the GAO Schedule Assessment Guide (GAO-16-89G, 2015). Use for building, assessing, or auditing a program's integrated master schedule (IMS): the ten best practices of a reliable schedule (capture, sequence, resource, duration, traceability, valid critical path, reasonable total float, schedule risk analysis, updating, baseline), the four characteristics (comprehensive, well-constructed, credible, controlled), critical path method arithmetic (forward/backward pass, total float), schedule risk analysis (Monte Carlo, contingency), statusing and baseline control, and the Appendix II audit triad. Scheduling/time-management oriented: it is the authority on schedule reliability, but it is NOT a cost-estimating guide, a full SE process model, an agile guide, or a risk-management framework — see sibling packs (gao-cost, dau-se-guidebook, nasa-schedule, nasa-risk) for those.

中文简介正在准备中。当前显示原文说明。

The NIST Cybersecurity Framework (CSF) 2.0, released in February 2024, provides a comprehensive taxonomy for managing cybersecurity risk through six core Functions - Govern, Identify, Protect, Detect, Respond, and Recover. bu skill covers conducting a maturity assessment against the CSF using Implementation Tiers to measure organizational cybersecurity posture and create improvement roadmaps.

中文简介正在准备中。当前显示原文说明。

ISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). bu skill covers the complete

中文简介正在准备中。当前显示原文说明。

Implement a vulnerability aging dashboard and SLA tracking system to measure remediation performance against severity-based timelines and drive accountability.

中文简介正在准备中。当前显示原文说明。

风险管理核心skill套件 — CVaR实时风控、动态仓位管理（风控版）。对标Bridgewater全天候策略、PIMCO风控体系的工程化实现。

中文简介正在准备中。当前显示原文说明。