risk analysis and threat assessment

profilerebdeoilw24
RiskSpreadsheet.xlsx

Asset List

________ (site)
Assessed Site:
List of Assets
List the jurisdiction's or site's critical assets that may be impacted by potential hazards.

Threat List

________________ (site)
Assessed Site:
List of Threats and Hazards
List all potential natural or human-caused threats and hazards that may impact any of the assets or functions performed at this site.
Type your selected hazards (one per line in column B); they will auto-populate to other tabs

Probability

Probability
Threats are evaluated on the relative likelihood of a particular incident occurring. However, this is not likelihood in the traditional sense of the word, since there are not sufficient historical data to know the probabilities of any future incidents. As such, likelihood is simply used as a qualitative substitute for quantitative probability.
Ratings should take into account the frequency that past incidents have occurred, the ease of which a human-caused incident could be planned and executed; and the likelihood that this site would be in the path of a natural disaster, or targeted for major crimes or terrorism.
Probability Rating Scale
1 - Not Likely This type of incident has never occurred agency-wide or at this site, nor at any similar organization (i.e. government, homeland security, emergency management facility); and is not likely to ever occur at this site.
2 - Somewhat Likely This type of incident has never occurred agency-wide or at this site; but has occurred at similar organization(s), and is possible to occur at this organization and/or site.
3 - Likely This type of incident has occurred at this organization and/or site; but its occurance is rare and not expected on a regular basis.
4 - Moderately Likely This type of incident has occurred at this site and/or organization; and while not expected to regularly occur, could occur more often than not.
5 - Highly Likely This type of incident occurs often at this organization and/or site, and can be expected to continue to occur often or regulary.
_________
Assessed Site:
Rate Probability of each Threat or Hazard
Using the Probability Rating Scale, rate the likelihood that each identified threat/hazard may occur at this site.
0
0

Vulnerability

Vulnerability
Using a scale of 1 to 5, rate the organization's vulnerability to all identified threats, with one being the least vulnerable, to five being the most vulnerable. Ratings should be based on an evaluation of current security procedures, equipment, and training.
Vulnerability Rating Scale
1 - Not Vulnerable This site has protective measures in place that are likely to deny access or prevent incident from occurring; and has a formal plan and consistent capability to detect and prevent the incident from occuring, or significantly mitigate the incident's impact.
2 - Somewhat Vulnerable This site has the capability to detect an incident before it occurs, and deterence measures that are likely to prevent the incident from occuring. In the case of natural hazards, the organization has a viable plan in place which addresses early warning, and a capability to mitigate the incident's impact.
3 - Vulnerable This site has a cursory-level plan in place to address this threat; and/or dependable capability to detect, deter, and/or prevent the threat from occuring, or mitigate its impact.
4 - Moderately Vulnerable This site has a cursory-level plan in place to address this threat; and/or a limited capability to detect, deter, and/or prevent the threat from occuring, or mitigate its impact.
5 - Highly Vulnerable This site has no dependable plan in place to address this threat; and/or no capability to detect and/or prevent the threat from occuring, or mitigate its impact.
Assessed Site:
Rate the Facility's Vulnerability to each Threat or Hazard
Using the Vulnerability Rating Scale, rate the overall vulnerability of the site to each threat/hazard.

Emily Bentley: Emily Bentley:
0
0

Impact

Impact
Using a scale of 1 to 5, rate the relative impact of each identified threat against the organization's operations, with one representing the least consequence, to five representing the greatest consequence. Consequence ratings should be based on an evaluation of all potential impacts, including: casualties, business impact, economic impact, and replacement cost.
Impact Rating Scale
1 - No Impact No human casualties, psychological impact, or business or economic loss as a result of this incident would occur at this site.
2 - Low Impact There could be some business or economic loss as a result of this incident at this site.
3 - Moderate Impact There could be some psychological impact, and/or moderate business or economic loss as a result of this incident at this site.
4 - Severe Impact There would be some human casualties, psychological impact, and/or business or economic loss as a result of this incident at this site.
5 - High Impact There would be casualties and losses that would jepordize the organization's future continuity, including loss of human life and/or significant loss of facilities as a result of an incident occurring at this site.
___________
Assessed Site:
Rate each Threat or Hazard's Impact on the Organization/Institution
Using the Impact Rating Scale, rate the likely impact that each threat/hazard could have on the site's assets and functionality.
0
0

Risk Rating

____________
Assessed Site:
Site's Risk Ratings
Risk Rating (R) is the product of the Probability (P), Vulnerability (V), and Impact (I).
R = P * V * I
The higher the Risk Rating, the higher the priority the threat or hazard becomes. Higher rated threats or hazards should be addressed in ways that lower P, V, and I ratings individually. This can be accomplished by developing actionable policies and plans, and by implementing viable solutions to prevent, detect, and deter potential hazards, or develop enhanced capabilities to respond to and mitigate against potential hazards.
Following are the relative risk ratings of each threat/hazard at this site.
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0 0
0 0