[BCM] [Boost] [E3] [RAR] [T3] Risk Impact and Likelihood Assessment

Notes for BCM Institute's Course Participants: This is the template for completing the "Part 3: RAR – Risk Impact and Likelihood Assessment."

Part 3: RAR – Risk Impact and Likelihood Assessment

Introduction

This chapter presents the Risk Impact and Likelihood Assessment for Boost Bank Malaysia, a fully digital bank operating nationwide.

Building upon the threat scenarios identified in Part 1: RAR – List of Threats, this section evaluates each threat in terms of its potential impact on various critical areas of the organisation, including financial performance, operational continuity, legal and regulatory compliance, reputation, social responsibility, human resources, and technology assets.

By assessing both the severity (impact) and the probability (likelihood) of each threat, the organisation is better positioned to prioritise risks and allocate resources effectively.

This structured approach follows the guidelines provided in BCM Institute’s framework and aligns with industry best practices in business continuity and operational resilience.

The resulting Risk Rating and Risk Level for each threat will inform the development of appropriate mitigation strategies and business continuity measures, ensuring that Boost Bank remains resilient in the face of diverse challenges.

Below is a sample RAR - Risk Impact and Likelihood Assessment Table for Boost Bank Malaysia. The values (e.g., scores, likelihoods) are hypothetical but grounded in best practices and risk management logic.

Part 3: RAR – Risk Impact and Likelihood Assessment – Boost Bank Malaysia

Table R3: Risk Impact and Likelihood Assessment

Legend and Definitions:

• Impact Ratings:
  • 1 = Very Low
  • 2 = Low
  • 3 = Medium
  • 4 = High
  • 5 = Very High

• Likelihood Ratings:
  • 1 = Very Low
  • 2 = Low
  • 3 = Medium
  • 4 = High
  • 5 = Very High

• Risk Rating: Calculated as Impact (highest score) × Likelihood

• Risk Level Classification:
  • 1–5 = Very Low
  • 6–10 = Low
  • 11–15 = Medium
  • 16–20 = High
  • 21–25 = Very High

The risk impact and likelihood assessment conducted in this chapter provides a comprehensive understanding of the key threats facing Boost Bank Malaysia.

The analysis highlights that cyberattacks, system outages, data breaches, and third-party service failures represent the highest risks to the organisation, given their significant potential to disrupt operations and compromise information security.

By quantifying these risks and identifying their most affected impact areas, Boost Bank can better prioritise its business continuity planning efforts. The results from this assessment will serve as the foundation for developing targeted risk mitigation strategies and continuity measures, as outlined in subsequent sections of the Business Continuity Plan (BCP).

This proactive approach ensures that Boost Bank remains well-prepared to respond effectively to disruptions, maintain regulatory compliance, protect stakeholder interests, and uphold customer trust in a rapidly evolving digital banking environment.

More Information About Business Continuity Management Courses