Rating Risk Rating Risk Risk Index Risk Assessment Action Action
Identify and Rate Risks for Business Events
Probability Consequence PxC=I Low - Med - High Type Reference
(strategic, operational, financial, compliance)
(1 to 5) (1 to 5) (1 to 25) (01-08) (09-16) (17-25)
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
Consider scenarios that may impact your business: supply chain disruption, technology shifts, competitive pressures, currency changes, raw material shortages, oil
price increases, work stoppage, economic downturn, increased regulations, etc.
Rating of Risk Probability (Over Planning Timeframe) Risk Index: Low (1-8) - Medium (9-16) - High (17-25)
Reference Risk Action Description of Action Person Due Date Actual Date
Number Level Type Assigned mm/dd/yy mm/dd/yy
Inherent risk is the current level of risk assuming existing responses operate according to design.
Residual risk is the estimated risk after responses under consideration are put into place.
Optimal Risk-Taking
Expected
Value
Risk Level