Identify the risks to an information system
Create a full list of events that may prevent, degrade or delay your organisation in achieving its business objectives.
-
Run a workshop with stakeholders
Running a workshop with the key stakeholders of the information system allows you to more accurately identify its risks.
-
Describe the risk scenarios
Find out what risk scenarios are, and how to write clear risk scenarios that will help you to analyse them during the risk assessment.
-
List the causes of each risk and the impacts if they happen
Making these lists helps to give your risk assessment team a clear view of the risks facing your organisation.