{
  "id": "workflow:enterprise-risk-register-review",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-risk-compliance.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Enterprise Risk Register Review",
    "workflowKind": "governance",
    "triggerType": "scheduled",
    "typicalCadence": "quarterly",
    "complexity": "cross-team",
    "description": "Reviews and updates the enterprise risk register across all\norganizational risk categories -- reassessing likelihood and impact\nratings for existing risks based on emerging indicators, identifying new\nrisks from regulatory changes, market shifts, and technology evolution,\nvalidating risk-owner assignments and mitigation-plan progress,\nevaluating control effectiveness through key-risk-indicator trend\nanalysis, conducting risk-appetite alignment checks with board-defined\nthresholds, and escalating risks that breach tolerance limits. Produces\nupdated risk register and quarterly risk dashboard. Excludes\nrisk-mitigation implementation.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "role:engineering-manager",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "role:planner",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "skill-area:threat-modeling",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "skill-area:data-quality",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "domain:operations",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "domain:finance",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "domain:legal",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "responsibility:security-review",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "responsibility:threat-modeling",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "org-unit:risk-management-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "org-unit:compliance-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:enterprise-risk-register-review",
      "to": "org-unit:finance-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}