Risk Assessment

profilejuskickz1
EXAMPLEofaRiskAssessmentExerciseSpreadsheet.xls

Sheet1

RISK ASSESSMENT FORM
Project Name
Prepared By
Date
Business Area Business processes associated with area (identify four or more processes associated with the business area) Risks Identified Description Probability of Occurrence Justification for probability of Occurance - Why did you select this? Impact Intensity Justification for Impact Intensity - why did you classify as you did (high, medium or low?) Existing Measures Mitigation Strategy Justification for selecting your mitigation strategy. Why? Additional Measures Contingency Plan
Accounting Creating billing invoices The web servers are damaged in a flood In order to charge clients for payment, each service provided by OptiPress must have a billing invoice created to track and report all charges. Human Resources, Accounting and Payroll and all the web servers have been centralized at the Headquarters. If the web servers are damaged, all three business areas cannot operate. Unlikely: 11-40% The probability of this occurrence is unlikely due to redundancy High The intensity if such an event would occur would do significant damage to several sites The plan is strong on Disaster Recovery for situations such as fire and other disasters of that nature. Exact details of the recovery plan are not mentioned. Risk Limitation Backups are provided A backup data center should be identified in the event that the Headquarters servers are damaged. Establish operation control procedures in the event that any of the company sites cannot continue operations. Notify all company members of all changes of control. Once the incident is no longer a problem, give back control to the original site.
Manage Customer Accounts Data Center Power Outage caused by tornado Data center experiences a tornado that causes a massive power outage impacting the ability to complete processing and managing of customer accounts Unlikely: 11-40% Data Center has backup power. High Customer payment records could not be processed. Plan was strong on Disaster Recovery for situations such as that at Host Point, it was almost silent on Business Continuity Risk limitation Backups are provided
List all the risks identified in relation to the particular activity
Very Likely: 91-100% Likely to occur: 61-90% May occur about half of the time: 41-60% Unlikely: 11-40% Very unlikely to occur: 0-10%
High (Catastrophic) Medium (Critical) Low (Marginal)
Avoidance Transference Limitation Acceptance

Sheet2