| Risk ID |
ID Date |
Cause(s) |
Risk Name |
Consequence |
Risk Details |
| Risk Owner (Responsible Person or Group) |
Probability |
Impact |
Risk Score |
Response Action Type |
Response Actions |
| 1 |
11/6/22 |
Internet problems |
technological |
Zero access to systems |
Poor internet Due to ISP issues |
| Internet provider |
Likely |
Minor |
Acceptable Risk: Medium |
Transfer |
Automaic recover |
| 2 |
11/6/22 |
incorrect information/data |
Data loss |
incomplete information/data |
Data in transit is corrupted |
| cloud service provider |
Unlikely |
Major |
Acceptable Risk: Medium |
Avoid |
use of software that will check the integrity of data |
| 3 |
11/6/22 |
Denial of service |
vendor |
revenue loss/ system outage |
users cannot access the system |
| vendor |
Likely |
Major |
Acceptable Risk: Medium |
Transfer |
Automaic recover |
| 4 |
11/6/22 |
Cloud servive management interface |
Remote access to management interface |
since cloud service is public it posses a risk that hackers can access the systems remotely |
most of te management activities are connected through the cloud and if hacked can couse major problems |
| cloud service provider |
Very Likely |
Major |
Unacceptable Risk: High |
Avoid |
implement protection mechanisms |
| 5 |
11/6/22 |
Programming error |
technological |
Sofware sizes to work |
inability to have any work done |
| Ballot Online |
Very Likely |
Minor |
Acceptable Risk: Low |
Avoid |
have a fall back option |
| 6 |
11/6/22 |
data loss |
Data loss |
both company and client data lost |
occurs when no back up facility has been initiated |
| cloud service provider |
Unlikely |
Moderate |
Acceptable Risk: Low |
Mitigate |
There has to be a back up system put in place |
| 7 |
11/6/22 |
Information that is stored by the cloud service provider is compromised |
Data breach |
company data become publicly accesible |
cloud service provider does not take breach seriouly by faling to conduct tests |
| cloud service provider |
Likely |
Major |
Unacceptable Risk: Extremely High |
Avoid |
obtain assurance from the provider that such a risk cannot occur |
| 8 |
11/6/22 |
password breach |
either insider or outsider |
unauthorized access |
password being to weak |
| Personel or IT department |
Very Likely |
Major |
Unacceptable Risk: High |
Mitigate |
come up with a strict password policy |
| 9 |
11/6/22 |
data breach |
hackers/ vendor |
compromized data |
occurs when sensitive data has been exposed |
| cloud service provider |
Very Likely |
Major |
Unacceptable Risk: Extremely High |
Transfer |
Data monitoring |
| 10 |
11/6/22 |
fire/flood |
enviromental |
property damage |
extream weather or distasters |
| Ballot Online/ cloud service provider |
Unlikely |
Major |
Unacceptable Risk: Extremely High |
Accept |
Distaster recovery measures |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |
|
|
|
|
|
|
|
|
| Select One |
Select One |
Select One |
Select One |