Posted on August 3, 2012 by

Structure for defining a risk

The risk of (what, where, when)….. caused by (how) ……resulting in..…(impact/consequences)

It needs to include:

  • Sufficient detail to understand what the risk is.
  • The cause of the impact (cause)
  • The impact to the objective (consequence)

You need to be careful to avoid:

  • Describing the risk as the potential impacts
  • Including risks that have no impact on objectives
  • Defining risks as the converse of the objective