{
  "id": "workflow:product-risk-analysis",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-cross-domain-risk.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Product Risk Analysis",
    "workflowKind": "governance",
    "triggerType": "event-driven",
    "typicalCadence": "per-release",
    "complexity": "cross-team",
    "description": "Analyzes product liability, safety, and regulatory risk before major\nreleases -- reviewing product changes against applicable safety\nstandards and regulatory requirements, assessing product liability\nexposure from feature changes that could affect user safety or data\nintegrity, evaluating accessibility and compliance impacts of UX\nchanges, conducting failure mode and effects analysis for critical\nproduct functions, reviewing terms-of-service and privacy policy\nalignment with new capabilities, and documenting risk acceptance\ndecisions with appropriate sign-off. Produces product risk\nassessment, FMEA worksheet, and regulatory compliance checklist.\nExcludes product development and legal contract drafting.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:product-risk-analysis",
      "to": "role:business-analyst",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:product-risk-analysis",
      "to": "role:operational-risk-analyst",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:product-risk-analysis",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:product-risk-analysis",
      "to": "skill-area:domain-driven-design",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:product-risk-analysis",
      "to": "skill-area:threat-modeling",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:product-risk-analysis",
      "to": "domain:operations",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:product-risk-analysis",
      "to": "domain:legal",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:product-risk-analysis",
      "to": "responsibility:risk-reporting",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:product-risk-analysis",
      "to": "responsibility:security-review",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:product-risk-analysis",
      "to": "org-unit:product-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:product-risk-analysis",
      "to": "org-unit:legal-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}