AGHIJOPQRSTUVWXYZAAAR
1
Objective of the risk assessment.
2
RISK IDENTIFICATION INITIAL RISK RATING
(Risk rated based on effectiveness of current controls at the time of the initial risk assessment)
EVALUATIONMITIGATIONS MANAGEMENT
3
#OBJECTIVERISK EVENTRISK CAUSEIMPACT/ CONSEQUENCEEXISTING MITIGATIONSL
(1-5)
C
(1-5)
SUMRISK RATINGADEQUACY OF EXISTING MITIGATIONS ACTIONADDITIONAL MITIGATIONSDELIVERABLE REQUIRED RESOURCESTASK OWNERDUE DATEDEPENDENCIES/ INTER-RELATIONSHIPS
4
This prompt row can be hidden to provide more page space.What planning objective does this event affect. What is it that you are working to avoid or reduce the likelihood or impact of occurring? Risks are future events that could interfere with achievement of objectives.What are the triggers, sources or circumstances that could act alone or together to increase the likelihood of the Risk Event occurring? There are usually multiple causes leading to a Risk Event.If this Risk Event did occur, how would it impact objectives? What are the longer-term or cumulative consequences? What are you doing now to reduce the likelihood or impact of the event?How likely?How severe?
Non-existent, Inadequate, Adequate, Robust, Excessive
Will you treat, monitor, transfer or avoid the risk?What else are you going to do to better manage the risk? What form will this mitigation take e.g. a project plan, a report, Treasury Board submission, other? What is needed to develop and implement the mitigation?Who will take the lead on this mitigation?When is the deliverable to be ready?Does the event or mitigation rely on another team or organization? Does it impact another group?
5
Sample1.3 Timely service delivery to citizens. Invoice delivery to clients is slow and inaccurate. - Legacy system is incompatible with data input requirements.
- Data entry practices inconsistent
- Manual data checks
- Unmet client service quality performance
- Increased A/R
- Increased risk of loss
- Increased cost of recovery
- Manual data checks
- Training manual
3412HIGHInadequateTreatLong term:
- System replacement

Short term:
- Update training manual
- Commit more staff time.
- re System replacement strategy

- Revised training manual and web counterpart

- Staffing solution for short term

re System replacement strategy: Confer with IT Director and budget shop to confirm process and criteria for business case.

Re Training manual: Assign lead

Re Staff assignment: Review workload breakdown and skills set.
re Systems replacement: Tom

re Training manual: Sarah

re Staff review: Tom
re System replacement strategy:
- End of fiscal

re Training manual:
- February 14th

re Staffing review and recommendation:
- February 7th
System shared with MFAS.
6
0UNRATED
7
0UNRATED
8
0UNRATED
9
0UNRATED
10
0UNRATED
11
0UNRATED
12
0UNRATED
13
0UNRATED
14
0UNRATED
15
0UNRATED
16
0UNRATED
17
0UNRATED
18
0UNRATED
19
0UNRATED
20
0UNRATED
21
0UNRATED
22
0UNRATED
23
0UNRATED
24
0UNRATED
25
0UNRATED
26
0UNRATED
27
0UNRATED
28
0UNRATED
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100