Conducting a Risk Assessment –Guide

Objectives

The intention of this document is to help the business conduct a Risk Assessment, which identifies current risks and threats to the business and implement measures to eliminate or reduce those potential risks.  This document provides guidance on how to conduct the Risk Assessment, analyze the information that is collected, and implement strategies that will allow the business to manage the risk.  The following documents are available to help the business complete the assessment:

• Risk Assessment Template
• Risk Assessment Worksheet
• Facility RA Findings Report
• Executive RA Findings Report
• Examples of Preventative Measures

The Risk Assessment is only part one of an overall Business Assessment.  A Business Assessment is separated into two constituents, Risk Assessment and Business Impact Analysis (BIA).  The Risk Assessment is intended to measure present vulnerabilities to the business’s environment, while the Business Impact Analysis evaluates probable loss that could result during a disaster.  To maximize the Risk Assessment, a Business Impact Analysis should also be completed. 

Table of Contents of Conducting a Risk Assessment

INTRODUCTION           

Compliance      
Scope  

RISK ASSESSMENT    

Objectives of the Risk Assessment        
Risk Assessment Process        
What Should Be Included?         
Steps to Follow 

ASSESSING YOUR RISK

Identifying Risks / Threats          
Probability of Occurrence           
Vulnerability to Risk      
Potential Impact
Preventative Measures in Place  
Insurance Coverage       
Past Experiences

           
ANALYZING THE RESULTS   

Review Interview Notes  
Follow-Up Meetings       
Report the Results
           

FINAL REPORT & PRESENTATION   

Creation of Executive Report      
Presenting the Results  
Next Steps       
Conclusion       

KEYS FOR SUCCESS

Senior Management Support      
Effective Data Gathering Tools    
Key Resources 
Critical Data     
Executive Report           

APPENDIX ITEMS

Appendix A:  Risk Assessment Survey   
Appendix B:  Risk Assessment Worksheet         
Appendix C:  Facility Risk Assessment Report
Appendix D:  Executive Risk Assessment Report
Appendix E:  Examples of Preventative Measures

To buy individual template packages, visit following links:

• Components of the Business Resumption Plan Templates Suite
• Hospital Disaster Recovery & Business Continuity Plan Template Suite
• Testimonials
• FAQ on Bussiness Resumption Plan Templates for Business Continuity & Disaster Recovery
• License Agreement
• Business Impact Analysis Template Packages
• Risk Assessment Template Packages
• Data Center Recovery Template Packages
• BCP & DRP Template Packages