Module 3. rISK Evaluation
Module 3. rISK Evaluation
RISK EVALUATION
Group 3
learning outcomes;
do nothing further;
consider risk treatment options;
undertake further analysis to better understand the risk;
maintain existing controls; and
reconsider objectives.
Decisions should take account of the wider context and the
actual and perceived consequences to external and internal
stakeholders. The outcome of risk evaluation should be recorded.
communicated, and then validated at appropriate levels of the
organization.
Frequency of
Risk Potential Retain Risk Transfer
Low
High
Severity of Risk Potential
Figure 1.4. The Risk Evaluation Matrix
Wilks and Davis (2000) defined the level of identified risk as follows:
Risk Retention
Risk Transfer
Risk Reduction
Risk Avoidance
THANK YOU