Integrated Risk Assessment

1. Context Establishment (Scope & Criteria)

Organizational Scope

Define the boundaries and critical functions under assessment for continuity planning.

Assessment Name Critical Function Assessed

Risk Evaluation Criteria (5x5)

Inherent Risk Score = Likelihood (L) x Impact (I). Max: 25.

L/I

1 (Insig)

2 (Minor)

3 (Mod)

4 (Major)

5 (Catas)

5 (Almost C.)

5

10

15

20

25

4 (Likely)

4

8

12

16

20

3 (Possible)

3

6

9

12

15

2 (Unlikely)

2

4

6

8

10

1 (Rare)

1

2

3

4

5

2. Assessment & 3. Control Evaluation

Evaluate **Inherent Risk** (before controls) and then rate existing control effectiveness to calculate the **Residual Risk** (risk remaining).

High Inherent Risks (Score > 12)

0

Average Control Effectiveness

0 / 5.0

Risks Migrated to Low (Residual Score < 6)

0

Hazard/Threat	L (1-5)	I (1-5)	Inherent	Controls / Treatment	Eff (1-5)	Residual	Action

4. Risk Migration & Review

Review the risk migration from Inherent to Residual risk (Top 5). Large gaps indicate effective controls, while small gaps highlight areas requiring new **Treatment Plans**.

ANALYSIS & RECOMMENDATIONS

Focus immediate attention on risks where the **Residual Risk Score** remains above 9. These are the highest priority items for developing detailed, resource-allocated **Treatment Plans** to further mitigate continuity threats. Utilize the `Add Risk` feature to log new hazards as they are identified.