Knowledge Base/Help Categories/Assessments

How do I do a risk assessment?

Stephanie Morgan
posted this on October 24, 2011 11:27 am

single-assessment-details_normal.jpg

The above example shows you an individual risk assessment item. You can breakdown this item by the two column layout.

The left side shows all the descriptions and details about the risk including:

  • Title
  • Category
  • Review Cycle
  • Associated Recommendations (if any)
  • Tags (think of tags like keywords for searching)
  • Objectives (for projects that associate risk assessment items to audit objectives or procedures)

The right side is where all the action takes place. The defining and adjusting of the risk levels.

  • Threat Level Slider
  • Threat Description Field
  • Threat Type Field
  • Safeguard Level Slider
  • Safeguard Description Field
  • Overall Score

How do I change the risk levels?

Adjusting risk is easy. All you do is take the arrows, for both threat and safeguards levels, and adjust them left or right to the approriate risk levels.

 slider_bar_normal.jpg

Is it that easy?

Yep. We have done extensive research into the various risk methodologies and believe that risk, at the end of every calculation, is a subjective decision. So with that said, we decided to take the more straight forward and simplest approach to risk analysis possible.

So the calculation looks like this: Threat Level - Safeguards Level = Overall Risk

Easy eh?