1

IDENTIFY ASSESS
RISK RISK

RISK
MANAGEMENT
PROCESS

REVIEW CONTROL
CONTROLS RISK
RISK MANAGEMENT PROCESS 2

WRITE YOUR SUBTITLE HERE

IDENTIFY ASSESS
RISK RISK

REVIEW CONTROL
CONTROLS RISK
RISK MANAGEMENT PROCESS 3

WRITE YOUR SUBTITLE HERE

IDENTIFY
RISK

REVIEW
CONTROLS
ASSESS
RISK

CONTROL
RISK
 RISK MANAGEMENT PROCESS 4

WRITE YOUR SUBTITLE HERE

IDENTIFY ASSESS
The company identifies and defines RISK RISK  The risk is then further evaluated
potential risks that may negatively after determining the risk's overall
influence a specific company process likelihood of occurrence combined
or project. with its overall consequence.

Following up on both the risks and During this step, companies assess
the overall plan to continuously their highest-ranked risks and develop
monitor and track new and existing a plan to alleviate them using specific
risks. risk controls. 

REVIEW CONTROL
CONTROLS RISK
RISK MANAGEMENT PROCESS 5

WRITE YOUR SUBTITLE HERE

ASSESS
RISK

IDENTIFY
RISK

REVIEW
CONTROLS
CONTROL
RISK
 RISK MANAGEMENT STRATEGIES 6

WRITE YOUR SUBTITLE HERE

CERTAIN Low Moderate High Extreme Extreme

LIKELY Low Moderate High High Extreme

LIKELIHOOD

POSSIBLE Low Moderate Moderate High High

UNLIKELY Low Low Moderate Moderate Moderate

RARE Low Low Low Low Low

INSIGNIFICANT MINOR SIGNIFICANT MAJOR CATASTROPHIC

SIGNIFICANCE
 RISK ASSESSMENT MATRIX 7

WRITE YOUR SUBTITLE HERE

CERTAIN LOW MODERATE HIGH EXTREME EXTREME

LIKELY LOW MODERATE HIGH HIGH EXTREME

LIKELIHOOD

POSSIBLE LOW MODERATE MODERATE HIGH HIGH

UNLIKELY LOW LOW MODERATE MODERATE MODERATE

RARE LOW LOW LOW LOW LOW

INSIGNIFICANT MINOR SIGNIFICANT MAJOR CATASTROPHIC

SIGNIFICANCE
 RISK ASSESSMENT MATRIX 8

WRITE YOUR SUBTITLE HERE

RISK CONSEQUENCE
RISK RISK
# DESCRIPTIO MITIGATION Low Medium High
N PLAN

High
Green marketing is a Green marketing is a
practice whereby practice whereby

RISK LIKELIHOOD
1 companies seek to companies seek to
go above and. go above and.

Medium
Green marketing is a Green marketing is a
practice whereby practice whereby
2 companies seek to companies seek to
go above and. go above and.

Low

Green marketing is a Green marketing is a

3 practice whereby practice whereby
companies seek to companies seek to
go above and. go above and.
Risk Level: Low Medium High
 RISK ASSESSMENT MATRIX 9

WRITE YOUR SUBTITLE HERE

Incidental Minor Serious Major Catastrophic

Frequent

RISK LIKELIHOOD
Occasional

Seldom

Remote

Unlikely

CONSEQUENCE/SEVERITY
 RISK METER SLIDE 10

WRITE YOUR SUBTITLE HERE

MIDDLE

LOW HIGH

RISK
 11

I F Y
IDE NT

M
EA
SU
R
E
RISK

REPORT
MANAGEMENT
FRAMEWORK

E
AG
AN
M
MO
NI TOR
 12

CONTROL RISK
During this step, companies assess
their highest-ranked risks and
develop a plan to alleviate them
using specific risk controls. 

IDENTIFY RISK
The company
identifies and defines
potential risks that RISK ASSESS RISK
may negatively
influence a specific
MANAGEMENT  The risk is then
further evaluated after
company process or FRAMEWORK determining the risk's
project.
overall likelihood of
occurrence combined
with its overall
consequence.
REVIEW CONTROLS
Following up on both the risks
and the overall plan to
continuously monitor and track
new and existing risks.
 RISK ASSESSMENT MATRIX 13

WRITE YOUR SUBTITLE HERE

ALMOST
RARE UNLIKELY POSSIBLE LIKELY
STRUCTURE CERTAIN

Green marketing is a practice whereby

companies seek to go above.
INSIGNIFICANT LOW LOW LOW LOW LOW

STRUCTURE
Green marketing is a practice whereby MINOR LOW LOW LOW MEDIUM MEDIUM
companies seek to go above.

MODERATE LOW LOW MEDIUM MEDIUM MEDIUM

STRUCTURE
Green marketing is a practice whereby
companies seek to go above.
MAJOR LOW MEDIUM MEDIUM HIGH HIGH

STRUCTURE
Green marketing is a practice whereby EXTREME LOW MEDIUM MEDIUM HIGH EXTREME
companies seek to go above.
 14

IN-DEPTH MODEL
VALIDATION

CO
RI ISTE
G

NS
SK
IN
ST
COMPLEXITY & MATERIAL

ME CY
TE

VALIDATION REPORT
AS TES
N
CK

UR TS
BA

E
SCORING
RISK
MANAGEMENT

INDEPENDENT
PLAUSABILITY TESTS

CORRECTIVE ACTION
ASSESSMENT
ESTABLISH THE
CONTEXT

IDENTIFY RISK

ANALYZE RISK
RISK ASSESSMENT
WRITE YOUR SUBTITLE HERE

EVALUATE RISK
RISK MANAGEMENT PROCESS

TREAT RISK

MONITOR &
REVIEW
15
 INSTITUTIONAL RISK MATURITY 16

WRITE YOUR SUBTITLE HERE

STRUCTURE

NAIVE AWARE DEFINED MANAGED ENABLED

Has not yet developed Scattered silo based Risk management Enterprise wide risk Risks taken on an
an approach for risk approach to risk strategy and policies in management approach informed basis.
management. management. place and communicated considering risk at Risk management is
Risks are a nuisance, Mitigate risks as they across the organization. highest level but could used to help manage
would rather avoid the become relevant. be further enabled in multiple aspects of the
talk of them. decision making. institution.
 17

Document the risks and related events and bring

together risk management related data in a risk
register that includes risk description, severity and
Provide up to date information on risk management impact, consequences, risk rating, mitigation plan
across the enterprise, including risk-control and related emerging issues.
assessments, near-misses, remediation statuses,
IDENTIFY
successes, failures and trends. Drill-down at finer
RISK
levels of detail on specific risks.

RISK
MANAGEMENT
REVIEW PROCESS ASSESS
CONTROLS RISK

Assess and measure identified risks using a set of

Leverage on established risk management
frameworks to define a set of controls that mitigate
those risks. Develop assessment plans to evaluate
and ensure effectiveness of the controls, and assign
to owners based on roles and responsibilities.
criteria that includes impact, likelihood,
controllability, and other determinants. Prioritize the
risks and assist managers in determining which risks
CONTROL
need to be addressed first.
RISK
 RISK MANAGEMENT 18

WRITE YOUR SUBTITLE HERE

ION ID
AT G EN RIS
NT IN
T TI
U
E
M PO R FIC K
O C RE AT
D D I ON
AN

REPORTS

RISK MITIGATION

AND ASSESSMENT
RISK

CLASSIFICATION
AND
TRACKER

CATION
DOCS

RISK MANAGEMENT
WORKFLOW
HA N
AN ZA A
AL RD I SK PL
R ON
YS T I
IS UC
E D
R
 RISK MANAGEMENT MODEL 19

WRITE YOUR SUBTITLE HERE

Requires

HIGH
Close monitoring Intensive
monitoring and
required management
management

MEDIUM
IMPACT

Risk may be
accepted, but Management Management
requires recommended required
monitoring

Risk acceptable,
LOW

Acceptable risk requires Managed

regulation

LOW MEDIUM HIGH

LIKELIHOOD
ENTERPRISE RISK MANAGEMENT 20

WRITE YOUR SUBTITLE HERE

PHASE 1: PHASE 2: PHASE 3: PHASE 4:

ASSESSMENT PLANNING COORDINATION IMPLEMENTATION

Focus area: Leadership and governance

Focus area: Standards

Focus area: Integrating independent risk management activities

Focus area: Integrating independent internal control activities