What is Risk Assessment Tool?
A risk assessment records uncertain events that could affect a plan, then compares their likelihood and impact so attention can be directed to the most consequential exposures.
When to use it
Use it before or during a plan to identify possible problems and prioritize them by probability and impact.
How the methodology works
Identify potential risks, assess their probability and impact, then develop mitigation strategies. Use a risk matrix to prioritize which risks need immediate attention.
- Describe a risk as an event and its possible consequence, not only as a broad concern such as 'operations'.
- Rate probability and impact using a consistent interpretation of the tool's scales.
- Add a response for priority risks, identify an owner or trigger where possible, and revisit ratings as evidence changes.
Example: Dependence on one supplier
Illustrative situation: A project relies on a single supplier for a component with a long replacement lead time. A delivery delay could affect the launch schedule.
How to apply it: Record the delay as the risk, rate its likelihood and schedule impact using available evidence, and consider a qualified alternate source or an earlier stock check as a mitigation.
Example limits: This scenario is illustrative, not evidence about a real business. Use evidence relevant to your decision for your own facts, ratings, probabilities, or financial estimates.
How to read the result
Prioritize high-impact, high-probability risks first, develop specific mitigation plans for critical risks, monitor medium risks, and consider risk transfer options.
Questions about Risk Assessment Tool
Is a risk score a precise forecast?
No. A probability and impact rating is a prioritization aid. It does not replace evidence, scenario analysis, or a clear explanation of the scale used.
Should I assess a risk before or after mitigation?
Start with the exposure before the response, then consider the remaining exposure after the proposed control. Keep the two views distinct when reviewing a plan.
Next step
Start with the plan's assumptions and dependencies. Turn each concern into a specific event, then rate and respond to the most consequential risks.
Need a printable resource or a step-by-step method? How to assess business risks. Write risk statements, record controls, and set review triggers.