Risk Risk
Risk Statement Risk Description Risk Owner
ID Category
Risk Treatment Plan (RTP)
Risk Rating Impact Mgmt
Probability (P) Control ID Control Type
Fn (I,P ) (I) Decision
eatment Plan (RTP)
Implementation Status
ISO Control Policy
Reference Reference Action Owner Timelines
Residual Risk
mplementation Status
Mgmt. Rating
Status Evidence Decision Fn (I,P )
dual Risk
Impact Probability
(I) (P)
Risk
Risk Title
Identify Risk
Description
Risk Owner
Appetite
Measure
Statement
Appetite
Impact
Appetite
Probability
Key Risk
Indicator
Indicator
Title
Qualitative
or
Quantitative
Instance
tolerance -
Red
tolerance
Instance
tolerance -
Amber
tolerance
Instance
tolerance -
Green
tolerance
Latest
Assessmen
t - narrative
Latest
Assessmen
t - RAG
Control
Title
Control
description
Control
owner
Monitor
Control
type
Design
adequacy
Operating
effectivenes
s
RAG
Key Control
Indicator
Indicator
Title
Qualitative
or
Quantitative
Instance
tolerance -
Red
tolerance
Instance
tolerance -
Amber
tolerance
Instance
tolerance -
Green
tolerance
Latest
Assessmen
t - narrative
Latest
Assessmen
t - RAG
Issues &
Actions
Issue Title
Issue
Manage Description
Action Title
Action
Description
Action
owner
Due date
Risk Assessment
Current
inherent
impact
Current
inherent
probability
Current
residual
impact
Measure
Current
residual
probability
Current
residual
financial
value
Current
Acceptabilit
y (RAG)
Assessmen
t
justification