| Activity | Risk | Impact (Low, Moderate, or High) | Risk Analysis | | | | Mitigation Control | Incident Response |
| | | | Consequence Rating (1-5) | Likelihood (1-5) | Risk Score | Risk Rating (Critical or Non Critical) |
| Information Technology (IT) | Male ware/ Spam | | | | 0 |
| | Phishing Attack |
| | Computer Beakdown |
| | Data Security |
| | Software Error |
| | Human Error |
| Human Resources (HR) | Employee Dissatisfaction |
| | Insufficient technical skills |
| | Inadequate Training |
| | Poor talent management |
| | High employee turnover |
| | Psychological risk (stress, work harassment, bullying, and harrassment) |
| | Wages Theft |
| | Employee Fraud |
| Natural Disaster/ Unexpected Occurance | Natural Disaster (flooding, earthquake, hurricane) |
| | Fire, Eletrical, Arson |
| | Key individual loss or turnover |
| Operational | Rejected Product or Proposal |
| | Defective Products |
| | Contaminated Products |
| | Unexperienced Staff |
| | Planning and scheduling conflicts |
| | Flight Cancelation or delay |
| | Contaminated or Damaged Materials |
| | Equipment Breakdown |
| | Unavailibility of parts |
| | No preventive maintenance on equipment |
| Contractual Risk/ Legal Risk | Breach of contract |
| | Statutory breaches |
| | Legislative Changes |
| | Changes in Government |
| | Political Turmoil |
| Financial Risk | Loss of Records |
| | Exchange Rates |
| | Government Fines |
| | Inadequate Insurance |
| | Over Paying for Insurance |
| | Inaccurate Accounting System |
| | Inaccurate Financial Forecasting |
| | Operating Above Sustainable Growth Rate (SGR) |
| | Operating Below Sustainable Growth Rate (SGR) |
| | Poor Cost Accounting |
| | Inadequate Reporting System |
| | Inventory Risk (Stock Issues) |
| | Poor Cash Flow |
| | Poor Asset Management |
| | Poor Current Ratio |
| | Loss of Contract |
| | Employee Accounting Fraud |
| | Bankruptcy |
| Management System | Lack of Continuous Improvement Process |
| | Lack of documented and information control |
| | Poor communication (internal/external) |
| | Lack of customer satisfaction |
| | Ineffective Internal Auditing |
| | Inadequate Objectives |
| | Poor sturcture of Quality Management System (QMS) |
| | Ineffective training about Quality Management System (QMS) and Its requirements |
| | Ineffective Corrective Action |
| | Inaccurate Data Analysis |
| | Lack of Performance Measurement tools |
| | Lacking Efficient or Lean Management |