Risk Assessment and Mitigation Process

Rozpoczęcie przepływu pracy/procesu.

Retrieve existing entries from the Asset/Process Data Model to define the scope of the assessment.

Create a new entry in the Risk Assessment Data Model to track this specific assessment instance.

Assign a task to the Risk Officer to identify potential threats and vulnerabilities.

Update the Risk Assessment entry with the list of identified threats and their initial descriptions.

Assign a task to subject matter experts to rate the probability and impact of each identified risk.

Update the Risk entries with numeric values for Likelihood and Impact scores.

Execute formula (Likelihood * Impact) to determine the Risk Magnitude for each entry.

Aggregate all risk scores to find the maximum risk level currently present in the assessment.

Assign a task to the Department Head to define actions for risks scored above the acceptable threshold.

Update the Risk entries with specific mitigation actions, owners, and deadlines.

Fetch all identified risks and their mitigation status for final review.

Assign a task to the Risk Committee/Manager to review and approve the assessment results.

Send an email to all Department Heads containing the finalized Risk Assessment summary.

Create a formal PDF/Report summarizing the findings, scores, and mitigation steps for compliance records.

Update the Risk Assessment entry status to 'Completed' and timestamp the closure.

Koniec przepływu pracy/procesu.