Skip to main content

Posts

Showing posts from June, 2013

RISK ASSESSMENT MATRIX AND ITS APPLICATION IN DECISION MAKING

Using the Risk Assessment Matrix . When assessing a risk for the first time you should assume there are no controls already in place.   The subsequent two assessments are completed with  1) those controls already in place and  2) with any additional controls needed to reduce the risk further.    The assessor should assign values for the identified  ‘likelihood’ of occurrence (A) and  the severity of the ‘Impact’ (B).    By multiplying ‘A’ and ‘B’ together you get the rating score, which gives an indication of how important the risk is.   The thick black line is the “line of tolerance”.   Those risks that are plotted above the line (score 10 – 25) are “out of tolerance” and should be referred to CRMG for further consideration. LIKELIHOOD (A) Very Likely 5 5 10 15 20 25 Likely 4 4 8 12 16 20 Feas...