From 892f0ad0266619d44fc9ac4859a78365c5db83e6 Mon Sep 17 00:00:00 2001
From: "risk-reporting-bot[bot]"
 <100334220+risk-reporting-bot[bot]@users.noreply.github.com>
Date: Fri, 17 Mar 2023 07:36:31 +0000
Subject: [PATCH] Add risk management templates

---
 .github/ISSUE_TEMPLATE/risk_template.md  | 46 ++++++++++++++++++
 .github/ISSUE_TEMPLATE/risk_template.yml | 59 ++++++++++++++++++++++++
 .github/risk-reporting.yml               |  6 +++
 3 files changed, 111 insertions(+)
 create mode 100644 .github/ISSUE_TEMPLATE/risk_template.md
 create mode 100644 .github/ISSUE_TEMPLATE/risk_template.yml
 create mode 100644 .github/risk-reporting.yml

diff --git a/.github/ISSUE_TEMPLATE/risk_template.md b/.github/ISSUE_TEMPLATE/risk_template.md
new file mode 100644
index 0000000..ffbb2e3
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/risk_template.md
@@ -0,0 +1,46 @@
+---
+name: Risk (markdown version)
+about: Report a risk you've identified
+title: ''
+labels: risk, triage
+assignees: ''
+---
+
+### Description
+
+**Risk of** ...
+**Due to** ...
+**Which impacts** ...
+
+### Likelihood
+
+<!-- Guidance: https://handbook.x15.ventures/#/risk_and_compliance/5x5_risk_matrix -->
+<!-- Uncomment one of the following: -->
+<!--1 - Rare-->
+<!--2 - Unlikely-->
+<!--3 - Possible-->
+<!--4 - Likely-->
+<!--5 - Almost certain-->
+
+### Impact
+
+<!-- Guidance: https://handbook.x15.ventures/#/risk_and_compliance/5x5_risk_matrix -->
+<!-- Uncomment one of the following: -->
+<!--1 - Negligible-->
+<!--2 - Minor-->
+<!--3 - Moderate-->
+<!--4 - Major-->
+<!--5 - Severe-->
+
+### Controls and mitigations
+
+<!-- What has been done to 1) mitigate (lower the impact of) the risk, 2) list controls (that lower the likelihood that this risk should occur) 3) should this risk occur what contingencies do you have (i.e what will you do if this risk occurs)? -->
+
+#### Controls (things that prevent this risk from occurring)
+
+- [x] Register the risk
+- [ ] _TODO: Additional controls to mitigate the risk_
+
+#### Residual risks
+
+<!-- Add residual risks as required -->
diff --git a/.github/ISSUE_TEMPLATE/risk_template.yml b/.github/ISSUE_TEMPLATE/risk_template.yml
new file mode 100644
index 0000000..386b174
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/risk_template.yml
@@ -0,0 +1,59 @@
+name: Risk
+description: Report a risk you've identified
+labels: [risk, triage]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Raise a risk and we will help you manage it.
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: A detailed description about the risk, its source, and how it impacts the business.
+    validations:
+      required: true
+
+  - type: dropdown
+    id: likelihood
+    attributes:
+      label: Likelihood
+      description: For more information, refer to [5 by 5 risk matrix](https://handbook.x15.ventures/#/risk_and_compliance/5x5_risk_matrix)
+      options:
+        - 1 - Rare
+        - 2 - Unlikely
+        - 3 - Possible
+        - 4 - Likely
+        - 5 - Almost certain
+    validations:
+      required: true
+
+  - type: dropdown
+    id: impact
+    attributes:
+      label: Impact
+      description: For more information, refer to [5 by 5 risk matrix](https://handbook.x15.ventures/#/risk_and_compliance/5x5_risk_matrix)
+      options:
+        - 1 - Negligible
+        - 2 - Minor
+        - 3 - Moderate
+        - 4 - Major
+        - 5 - Severe
+    validations:
+      required: true
+
+  - type: textarea
+    id: controls
+    attributes:
+      label: Controls and mitigations
+      description: What has been done to 1) mitigate (lower the impact of) the risk, 2) list controls (that lower the likelihood that this risk should occur) 3) should this risk occur what contingencies do you have (i.e what will you do if this risk occurs)?
+      value: |
+        #### Controls (things that prevent this risk from occurring)
+
+        - [x] Register the risk
+        - [ ] _TODO: Additional controls to mitigate the risk_
+
+        #### Residual risks
+
+        <!-- Add residual risks as required -->
diff --git a/.github/risk-reporting.yml b/.github/risk-reporting.yml
new file mode 100644
index 0000000..954916e
--- /dev/null
+++ b/.github/risk-reporting.yml
@@ -0,0 +1,6 @@
+project: unloan/find-github-pull-request
+# output: risks.yml
+
+# include risk summary in the following files
+summary-files:
+  - README.md