Risk Response Plan Template[2]

Risk Register Your Organization Name Here Project Name: Instructions: Threat Priority Thresholds High Medium 4.5 2 1. Enter Impact and Probability Scores (or use default provided) 2. Enter Priority Cutoff scores for Threats 3. Enter Priority Cutoff scores for Opportunities 4. Enter risk impact and probability scores on the main worksheets. Color coding indicates priority of Risks and Opportunities Opportunity Priority Thresholds High Medium 4 Threats = High Priority = Medium Priority 2 = Low Priority Opportunities = High Priority = Medium Priority = Low Priority Threats 9 7 0.9 0.7 0.5 0.3 0.1 0.1 2.7 2.1 1.5 0.9 0.3 0.3 4.5 3.5 2.5 1.5 0.5 0.5 6.3 4.9 3.5 2.1 0.7 0.7 8.1 6.3 4.5 2.7 0.9 0.9 8.1 6.3 4.5 2.7 0.9 0.9 Opportunities 6.3 4.9 3.5 2.1 0.7 0.7 4.5 3.5 2.5 1.5 0.5 0.5 2.7 2.1 1.5 0.9 0.3 0.3 0.9 0.7 0.5 0.3 0.1 0.1 Impact 5 3 1 Probability Note: Be certain to fill out the Risk Response Plan before using this workbook. Available at www.cvr-it.com. Risk Register [Rev. 1.4 10-24-2007] Page 1 of 21 Printed on: 8/12/2008 Risk Register Threat Register Project Name: 0 Risk ID Example: 071111a Risk Description Impact Area Risk Cause Impact Score Critical Probability Risk DetectaStatus Score bility 8.1 Low Assigned to Your Organization Name Here New technology presents IT with a steep learning curve, could cause delay in implementation Sample data on this tab are displayed on the ThreatChart tab Schedule Staff do not have experinece in this technology Very High Active Joe Smith 071123a 071123b 071210a 071211a 071222a 080105a 080109a 080109b 080111a Very Serious Serious Moderate Minor Moderate Moderate Very Serious Very Serious Serious Very High Very High Very High Very High High Low High Low Med 6.3 4.5 2.7 0.9 2.1 0.9 4.9 2.1 2.5 0 0 0 0 0 0 0 0 0 0 0 High Low High Low High Low High Low Med Risk Register [Rev. 1.4 10-24-2007] Page 2 of 21 Print Date: 8/12/2008 Risk Register 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 3 of 21 Print Date: 8/12/2008 Risk Register 0 0 Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 4 of 21 Print Date: 8/12/2008 Risk Register Your Organization Name Here Trigger Event Risk ID Example: 071111a Signs and Symptoms Results of formal analysis Response Strategy Contingency Reserve; Cost and Schedule adjustments to Project Plan Date of Plan Approval 04-Mar-06 Staff does not obtain training; early "prove feasibility" tasks are not completed Advanced training planned for 3 staff to occur on 12/2/03 071123a 071123b 071210a 071211a 071222a 080105a 080109a 080109b 080111a 0 0 0 0 0 0 0 0 0 0 0 Risk Register [Rev. 1.4 10-24-2007] Page 5 of 21 Print Date: 8/12/2008 Risk Register 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 6 of 21 Print Date: 8/12/2008 Risk Register 0 0 Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 7 of 21 Print Date: 8/12/2008 Risk Register Your Organization Name Here Comments; Fallback plans Example text Do not remove or change these cells! Threat Priority Thresholds High Medium 4.5 2 Opportunity Priority Thresholds High 4 Medium 2 Risk Register [Rev. 1.4 10-24-2007] Page 8 of 21 Print Date: 8/12/2008 Risk Register Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 9 of 21 Print Date: 8/12/2008 Risk Register Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 10 of 21 Print Date: 8/12/2008 Risk Register Opportunity Register Project Name: 0 Opportunity ID Example: 021111a Opportunity Description Impact Area Schedule Opportunity Cause Impact Score Very High Very High Very High High High High High High Probability Opportunity DetectaStatus Score bility 4.5 High Assigned to Your Organization Name Here New technology presents IT with a real opportunity, could shave weeks off of implementation Med Active Joe Smith Very Low Low Very High High Med Low Very Low 0.9 2.7 6.3 4.9 3.5 2.1 0.7 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Med Low Risk Register [Rev. 1.4 10-24-2007] Page 11 of 21 Print Date: 8/12/2008 Risk Register 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 12 of 21 Print Date: 8/12/2008 Risk Register Your Organization Name Here Trigger Event Risk ID Example: 021111a Signs and Symptoms Results of formal analysis Response Strategy Contingency Reserve; Cost and Schedule adjustments to Project Plan Date of Plan Approval 04-Mar-06 Vendor announces availability of the new product Expedite purchase of a sample of the new technology 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Risk Register [Rev. 1.4 10-24-2007] Page 13 of 21 Print Date: 8/12/2008 Risk Register 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 14 of 21 Print Date: 8/12/2008 Risk Register Your Organization Name Here Comments; Fallback plans Example text Do not remove or change these cells! Threat Priority Thresholds High Medium 4.5 2 Opportunity Priority Thresholds High 4 Medium 2 Risk Register [Rev. 1.4 10-24-2007] Page 15 of 21 Print Date: 8/12/2008 Risk Register Your Organization Name Here Risk Register [Rev. 1.4 10-24-2007] Page 16 of 21 Print Date: 8/12/2008 Risk Chart - Risk Score x Detectability This chart displays one data point for each risk. Low Risk Scores are on the left High Risk Scores are on the right Highly detectable risks are at the bottom Poorly detectable risks are at the top Pay specific attention to risks in the top right quadrant. These are high risks with low detectability. To identify highest priority risks (i.e. high Risk Score and Low Detectability), do the following: 1. Select all rows below that have risk data (starting with row 19) 2. Sort on column C, Descending, then sort on Column B, Descending, as follows Click on Data; Click on Sort; Click on No Header Row; Select Column C (Risk Score x Detectab Descending; Click on OK Click on Data; Click on Sort; Click on No Header Row; Select Column B (Risk Score) Descendin OK 3. For each unique Risk Score, the highest Risk x Detectability values will be at the top 4. Data on this page are updated automatically as you revise or enter new data on the ThreatRegister tab Risk Score x Detectability 40.5 6.3 22.5 2.7 4.5 2.1 4.5 4.9 10.5 7.5 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Risk ID 071111a 071123a 071123b 071210a 071211a 071222a 080105a 080109a 080109b 080111a 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Risk Score 8.1 6.3 4.5 2.7 0.9 2.1 0.9 4.9 2.1 2.5 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Risk Detectability 45 40 35 Detectability 30 25 20 15 10 5 0 0 1 2 3 4 Risk Score 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Column C (Risk Score x Detectability) Column B (Risk Score) Descending; Click on n the ThreatRegister tab Risk Detectability 5 Risk Score 6 7 8 9 Definitions For a complete explanation of how to use this template, see the companion document, Risk Management Plan. Risk ID Impact Area Impact Score (Threat) YYMMDDx (e.g., 021112a = first risk, logged on Nov 12, 2002) Cost, Schedule, Scope, Quality 1/3/5/7/9 where: 1 = Minor impact (could have minimal effect on project cost, schedule or deliverables) 3 = Moderate impact (could have moderate effect on project cost, schedule or deliverables) 5 = Serious impact (could significantly increase cost, delay the schedule or degrade deliverables) 7 = Very Serious impact (could kill the project or seriously reduce project value) 9 = Critical impact (will kill the project) 0.1/0.3/0.5/0.7/0.9 where 0.1 is very low and 0.9 is very high Impact x Probability An indication of how easy it will be to see this risk event coming before it actually occurs. 1=high (can see the event well in advance) 3=medium (can see the event just before it happens) 5=low (can see the event as it happens or after it happens) Determined by criteria set on Priority Chart tab Active (being worked), Observe, Closed To add more rows, copy and insert formatted rows. Note: Values for Probability and Impact Score are derived from the Risk Management Plan Template Source http://www.cvr-it.com Probability Risk Score Detectability Priority Status Copyright CVR/IT Consulting 2006.May be used freely for non commercial purposes. For commercial uses, contact info@cvr-it.com