Complete AI Training
Sign inGet started

AI agent for managing directors

Cyber Risk Register Update Agent

A current cyber risk register where every high risk is owned

Risk managementExecutives and strategyManagementIT and development
See how it worksGet access
Cyber Risk Register Update Agent: what goes in, what the agent does and what you get

What it does

Executives need a current view of cyber risk, not last year's list copied forward. Each quarter this agent gathers vulnerability trends, incidents, audit findings and threat reports relevant to the industry. It updates likelihood and impact for each risk using only the agreed scoring scale, and lists newly reported threats with no internal data as emerging risks without a score. It drafts treatment plans with costs where known. It then checks that every high risk has a named owner and a dated action. If not, it asks the likely owner and redrafts the plan. A second check compares scores with last quarter and asks for a reason behind any jump of two levels or more. The IT leader approves the register before it goes to executives. Edge case: a risk whose owner left the company is reassigned through their manager, not left blank.

How it works

Follow the arrows from top to bottom. The orange dashed arrow is the loop: when a check fails, the agent goes back and tries again.

Start and resultWhat it doesA check on its own workWaits for your OKGoes back and retries
Yes, continueYes, continueApprovedNoNo 1 STARTS WHEN Quarter starts 2 USES A TOOL Gather vulnerability, incident, audit and threatinputs 3 DOES Update likelihood and impact scores on the agreedscale 4 DOES List emerging risks without a score 5 DOES Draft treatment plans with known costs 6 CHECKS THE RESULT Does every high risk have an owner and a datedaction? If not: ask likely owners and redraft the plans. Back tostep 5. 7 CHECKS THE RESULT Is every jump of two levels or more explained? If not: find the evidence behind the change or revisethe score. Back to step 3. 8 YOU APPROVE IT leader approves the register 9 RESULT Updated risk register for executives
Read the steps as a list
  1. Quarter starts
  2. Gather vulnerability, incident, audit and threat inputs
  3. Update likelihood and impact scores on the agreed scale
  4. List emerging risks without a score
  5. Draft treatment plans with known costs
  6. Does every high risk have an owner and a dated action?If not: ask likely owners and redraft the plans. Back to step 5.
  7. Is every jump of two levels or more explained?If not: find the evidence behind the change or revise the score. Back to step 3.
  8. IT leader approves the registerThe agent waits here for your OK.
  9. Updated risk register for executives

How it decides

It scores each risk on the agreed scale and requires an owner and dated action for any risk above the threshold.

  • Agreed scoring scale only
  • Emerging risks are listed without a score
  • High risks need owners and dates

Make it yours

Every agent is a starting point. You choose these settings for your own situation.

  • Scoring scale
  • High risk threshold
  • Input sources
  • Review schedule

What keeps you in control

It always asks you first

  • Sharing with executives or the board
  • Accepting a risk

Hard limits

  • Never shares outside the leadership group
  • Never accepts risks on anyone's behalf

It stops when

  • Done: approved register
  • Stop: owner not agreed, list as unowned for the executive meeting

Set it up

We guide you through the set-up, step by step

Members get the full set-up guide for this agent. No technical skills needed: you copy, paste and upload.

10 minto set it up in your AI
5 AIsChatGPT, Claude, Copilot, Gemini, Grok
  • One set of instructions to paste into your AI, with the clicks for ChatGPT, Claude, Microsoft 365 Copilot, Gemini and Grok
  • The agent then walks you through connecting your own data, one source at a time
  • A downloadable copy with the flow chart, the rules and the full guide
Get access to this agent

An example run

What happensIn the Q3 update, ransomware risk rose from medium to high after two phishing incidents and an untested offline backup. The owner check failed: the treatment plan had no owner. The agent asked the infrastructure manager, who took it with a first restore test due October 20. The score jump check passed with the incidents cited. The CIO approved the register on October 3.

More agents for managing directors

Decisions · Monitoring

Strategy Experiment Coordination Agent

Every strategic experiment reaches a decision at its checkpoint, based on its original rules.

7 steps1 check8 jobs Decisions · Executives and strategy

Strategy Portfolio Overlap Agent

No two initiatives fund the same deliverable without coordination.

8 steps1 check7 jobs Budgets and money · Decisions

Budget Request Challenge Agent

Budget requests are supported with detail and ranked by value before decisions.

10 steps1 check15 jobs Quality control · Analysis

Executive Dashboard Anomaly Check Agent

Only real changes in the numbers reach the leadership meeting.

10 steps1 check8 jobs