Assignment: Risk Analysis and Review Submission

1Sample of Completed Risk Analysis and Review (RAR) Questionnaires

This blog aims to provide BCM Institute's workshop participants with a sample submission of a RAR assignment.

The content of RAR Questionnaires includes a "Cover Sheet" or "Assignment Cover Sheet".  There are three templates following the cover sheet, and they are:

• RAR 1-1: List of Threats
• RAR 2-1: Risk Treatment
• RAR 3-1: Risk Impact and Likelihood Assessment

Risk Analysis and Review

Part 1: RAR 1-1: List of Threats

Columns 1 to 9

Frequently Asked Questions (for Part 1) for completing the template.

1. Mark a "Y" or "Yes" if it applies to your country or organization
2. Mark an "N" or "No" if it applies to your country or organization
3. It is possible to have a "Yes" for the country but an "N" for the organization because the threat to your country does not affect the location of your organization.  This scoring can occur in a reverse manner.
4. No boxes should be left empty, as they will be tabulated at an organizational level after submission.
5. You can also request additional threats to be inserted by informing your designated BCM manager or equivalent.

Part 2: RAR 2-1: Risk Treatment and Evaluation of Existing Controls

Columns 1 to 8

1. Mark an "X" or "Cross" in Columns 3 to 6 of the "Existing Risk Treatment" when applicable
2. Note that there can be more than one "Risk Treatment" in columns 3 to 6
3. Elaborate in column 7 or "Existing Control" if an "X" is marked in Columns 3 to 6. 
4. Document the current or implemented controls that are currently in place in your organization
5. Remember to add the type of treatment, e.g., risk reduction," after mentioning your existing control.
6. Proceed to add your suggested recommended control to be implemented in Column 8, "Additional Control".

Frequently Asked Questions (for Part 3) for completing the template.

1. Score "1" to "5" for all "Risk Impact Areas" or Columns 3 to 9.  Do not leave any blanks.
2. Score "1" if it is not applicable as it is regarded as low impact
3. Identify the highest numeric score from the "Risk Impact Areas" and insert it into 
   "Risk Impact Areas (Highest Numeric Score)".
4. If there is more than one highest numeric score in the "Risk Impact Areas" columns 3 to 9.
   • proceed to select the highest numeric score, the highest impact of the four similar scores. 
   • The above example has four "5" in four "Risk Impact Areas", and in this case, you have identified a column designated as "People [6]" to be the highest impact as compared to the other three. 
   • Proceed to add number [6] or Risk Impact Area "6" after the score of five.

Table of Content for Risk Analysis and Review (RAR) Questionnaires

This section is still under construction.