Conducting a Risk Assessment – Guide

Objectives

The purpose of this Risk Assessment document is to assist organization conduct a Risk Assessment, which discovers current risks and threats to the business and implement prevention measures to mitigate or to reduce those high potential risks.  This Risk Assessment document provides guidance on how to conduct the Risk Assessment, evaluate and analyze the information that is collected, and implement appropriate strategies that will help the organization to manage the potential risk.  The following Risk Assessment documents are available to help the organization complete the Risk Assessment:

• Risk Assessment Template
• Risk Assessment Worksheet
• Facility RA Findings Report
• Executive RA Findings Report
• Examples of Preventative Measures

The Risk Assessment is only a part of an overall Business Assessment.  A Business Assessment is divided into two constituents, Risk Assessment and Business Impact Analysis (BIA).  The Risk Assessment is intended to measure present risk and vulnerabilities to the business’s environment, while the Business Impact Analysis evaluates probable loss that could result during a disaster.  To maximize the Risk Assessment, a Business Impact Analysis should also be completed. 

Table of Contents of Conducting a Risk Assessment

INTRODUCTION           

Compliance      
Scope  

RISK ASSESSMENT    

Objectives of the Risk Assessment        
Risk Assessment Process        
What Should Be Included?         
Steps to Follow 

ASSESSING YOUR RISK

Identifying Risks / Threats          
Probability of Occurrence           
Vulnerability to Risk      
Potential Impact
Preventative Measures in Place  
Insurance Coverage       
Past Experiences

           
ANALYZING THE RESULTS   

Review Interview Notes  
Follow-Up Meetings       
Report the Results
           

FINAL REPORT & PRESENTATION   

Creation of Executive Report      
Presenting the Results  
Next Steps       
Conclusion       

KEYS FOR SUCCESS

Senior Management Support      
Effective Data Gathering Tools    
Key Resources 
Critical Data     
Executive Report           

APPENDIX ITEMS

Appendix A:  Risk Assessment Survey   
Appendix B:  Risk Assessment Worksheet         
Appendix C:  Facility Risk Assessment Report
Appendix D:  Executive Risk Assessment Report
Appendix E:  Examples of Preventative Measures

To buy individual template packages, visit following links:

• Components of the Business Resumption Plan Templates Suite
• Hospital Disaster Recovery & Business Continuity Plan Template Suite
• Testimonials
• FAQ on Bussiness Resumption Plan Templates for Business Continuity & Disaster Recovery
• License Agreement
• Business Impact Analysis Template Packages
• Risk Assessment Template Packages
• Data Center Recovery Template Packages
• BCP & DRP Template Packages