Security Risk Assessment for Transport Operators - Department of ...

The risk assessment processFigure 1: The risk assessment processIdentify the riskCritical assetIdentify key organisational assetsor dependenciesPart 1Source of riskPotential areasof impactIdentify internal and external threatsto the critical assetIdentify areas of the organisationthat may be affectedIdentified riskCombine the three elements aboveto identify the riskAnalyse the riskConsequenceAnalyse and rate the effects ofpotential worst case scenariosPart 2LikelihoodAnalyse and rate the probabilityof the risk occurringRisk ratingCross reference the two scoresto establish the final risk ratingEvaluate the riskPart 3TolerancePrioritisationEvaluate the organisation’sacceptance of each riskEvaluate the risks to determinethe priorities for further action6 Security Risk Assessment Guide