| | [Company Name] |
| | Risk Assessment and Financial Impact Model |
| | [Date] |
| | Gray cells are calculated for you. You do not need to enter anything into them. |
| | Risk area | Potential risk | Number of annual incidents | Cost per incident | Total annual cost | Probability of occurrence | Weighted cost | Mitigating strategies & controls | Annual control cost | Cost/benefit | Decision summary | Owner |
| | Competitive | Contoso, Ltd. might introduce a superior offering on June 30 to compete with our #1 product line. | 1.00 | $1,850,000 | $1,850,000 | 75.0% | $1,387,500 | Reduce price by 25% on May 31 to keep the volume stable. | $1,150,000 | $237,500 | Monitor competitor progress and implement new strategy if required. | Kirk DeGrasse |
| | | | | | $0 | | $0 | | | $0 |
| | Economic/political | | | | $0 | | $0 | | | $0 |
| | | | | | $0 | | $0 | | | $0 |
| | Regulatory/legal | Need to meet Sarbanes-Oxley 404 (SOX) compliance requirements by target date. | 1.00 | $15,000,000 | $15,000,000 | 5.0% | $750,000 | Establish SOX Compliance Office on January 15 to ensure compliance 30 days before required date. | $1,200,000 | ($450,000) | Despite negative cost/benefit, proceed with SOX compliance because of the company's high visibility. | Kim Ralls |
| | | | | | $0 | | $0 | | | $0 |
| | | | | | $0 | | $0 | | | $0 |
| | Technological | Potential exists for hackers to compromise internal network and obtain confidential customer or employee information. | 5.00 | $4,000,000 | $20,000,000 | 10.0% | $2,000,000 | Upgrade firewall to latest version; install proxy server in Q2. | $750,000 | $1,250,000 | Continue to monitor technology to ensure that our company's and our clients' information is protected. Intrusion would have an enormous effect. | Carol Philips |
| | | | | | $0 | | $0 | | | $0 |
| | | | | | $0 | | $0 | | | $0 |
| | Operational | If a key parts supplier in Eastern Asia suddenly goes out of business, it will risk 25% of production. | 1.00 | $1,250,000 | $1,250,000 | 75.0% | $937,500 | Partner with alternate suppliers to reduce reliance on dominant supplier. | $937,500 | $0 | Begin negotiating terms with other key suppliers; take care not to lock into minimum volume agreements. | Michiko Osada |
| | | | | | $0 | | $0 | | | $0 |
| | | | | | $0 | | $0 | | | $0 |
| | Financial | | | | $0 | | $0 | | | $0 |
| | | | | | $0 | | $0 | | | $0 |
| | | | | | $0 | | $0 | | | $0 |
| | | | | | $0 | | $0 | | | $0 |
| | | | | | $0 | | $0 | | | $0 |
| | | | | | $0 | | $0 | | | $0 |
| | | | | | $0 | | $0 | | | $0 |
| | TOTALS | | | $22,100,000 | $38,100,000 | | $5,075,000 | | $4,037,500 | $1,037,500 |