As part of creating a risk assessment, you need to identify and add threats to your risk assessment. This can be done in two ways you can either choose to get suggested threats based on your risk assessment or create threats on your own. Both ways will be described in this article.
Suggested Threats
Note, this is only possible if this has been set up by an administrator on the Organizations page, for more information check out this article.
Click on the suggested threats button, you will see a list of pre-defined threats from the threats template.
Deselect the ones you find irrelevant by clicking on the checkboxes.
Click import to add the threats to your risk assessment.
Afterward, click on each threat to assess the likelihood and consequence and/or edit information about the threat.
Click on save.
Likelihood and consequence
Note, the likelihood and consequence part of a risk assessment can look different for some users depending on the choice of the individual organizations.
The consequence is divided into human, operations and reputation.
Human meaning the consequence it would have on people.
Operations meaning the consequence it would have for your company’s operations.
Reputation meaning the consequence it would have to your company’s reputation.
The likelihood and consequence levels range from 1-5. On this heat matrix, you will get a better idea of what the different number ranging from 1-5 represents. You can also see what the different colors represent.
Mandatory threats
When a mandatory threat is available for your Risk Assessment, a symbol indicating the number of mandatory threats available for the respective risk assessment will be displayed beside the suggested threats button.
Clicking the Suggested Threat button will reveal the Threat Suggestions list, where mandatory threat will be marked with an exclamation mark next to the checkbox. Additionally, the checkbox for mandatory threat will be disabled, preventing it from being unchecked.
Create threats
You have the option of creating your own threats as part of a risk assessment. This can be done as a way to supplements suggested threats because you feel something is missing, or it can be the way your organization has decided to do Risk Assessments. To create your own threat, follow the instructions below:
Click on the Create threat button.
Fill out the information regarding the threat manually and assess the likelihood and consequence.
Click on save.
What's next?
Once you have added your threats, the next step is to add treatments to you Risk Assessment to mitigate the threats identified.
🤔 Didn't find what you were looking for?
Don't worry! We are here to help. Feel free to write directly to us on support@humanrisks.com and we will be of assistance.