Page 1

RISK ASSESSMENT F

HAZARD AND RISK IDENTIFICATION RISK ANALYSIS

THREAT RISK LIKELIHOOD IMPACT RISK SCORE

 Page 2

Risks can be
categorized as Assess likelihood in terms of
affecting the following: FREQUENCY and Assess the impact as: ASSESS the risk as:
PROBABILITY 5 - Extreme Very High
Natural, Human-
1. People 5 - Frequet/Almost Certain 4 - Major High
Induced, Technological,
2. Facility 4 - Likely 3 - Moderate Moderate
Biological
3. Public 3 - Possible 2 - Minor Low
4. Process 2 - Unlikely 1 - Incidental Very Low
5. Supply Chain 1 - Rare
6. ICT

Earthquake (ground shaking) People: Employees are 3 Possible 5 Extreme 15

affected and critical function
holders will not be able to
report for work
 Page 3

Facility: Main office will be 3 Possible 4 Major 12

affected and rendered
inaccessible

Public: Clients transacting in 3 Possible 4 Major 12

the office may suffer injuries.

Process: Office lockdown 3 Possible 4 Major 12

affecting operations

ICT: Failure of IT-dependent 3 Possible 2 Minor 6

systems and applications

Tropical Cyclone/Heavy People: Employees are 5 Frequent or Almost Certain 4 Major 20

Rainfall affected and critical function
holders will not be able to
report for work
 Page 4

Facility: Main office will be 4 Likely 5 Extreme 20

affected and rendered
inaccessible

Public: Clients transacting in 3 Possible 4 Major 12

the office may suffer injuries.

Process: Office lockdown 3 Possible 4 Major 12

affecting operations

ICT: Failure of IT-dependent 3 Possible 2 Minor 6

systems and applications

Terrorism People: Employees are 1 Rare 5 Extreme 5

affected and critical function
holders will not be able to
report for work
 Page 5

Facility: Main office will be 1 Rare 4 Major 4

affected and rendered
inaccessible

Process: Office lockdown 1 Rare 5 Extreme 5

affecting operations

Cyberattack ICT: Failure of IT-dependent 5 Frequent or Almost Certain 5 Extreme 25

systems and applications

Landslide People: Employees are 1 Rare 5 Extreme 5

affected and critical function
holders will not be able to
report for work
 Page 6

RISK ASSESSMENT FOR CONTINUITY OF OPERATIONS

RISK EVALUATION AND CONTROL

RISK SCORE CURRENT CONTROL MEASURES IN PLACE EFFECTIVENESS

 Page 7

Assess effectiveness of current

controls:

5 - With controls in place which are

ASSESS the risk as:
working and controls in place are
Very High
industry leading practice.
High Indicate current control measures in place
4 - With highly effective controls in
Moderate (consider both infra and non-infra interventions)
place, with little room for improvement.
Low
3 - With fairly effective controls in
Very Low
place but needs improvement
2 - With Controls in place but are
inneffective
1 - No Controls in Place

Moderate With back-up system in place. 3 - With fairly effective controls in place but needs
improvement
 Page 8

Moderate Infra: Building undergoes regular maintenance 3 - With fairly effective controls in place but needs
improvement

Moderate With stand-by fire extinguisher. With accessible fire exit. 4 - With highly effective controls in place, with
little room for improvement

Moderate Physical security of office is secured 3 - With fairly effective controls in place but needs
improvement

Low Upgrading of ICT equipment and installation safety measures 3 - With fairly effective controls in place but needs
improvement

Very High With back-up system in place. 3 - With fairly effective controls in place but needs
improvement
 Page 9

Very High Infra: Building undergoes regular maintenance 3 - With fairly effective controls in place but needs
improvement

Moderate With stand-by fire extinguisher. With accessible fire exit. 4 - With highly effective controls in place, with
little room for improvement

Moderate Physical security of office is secured 3 - With fairly effective controls in place but needs
improvement

Low Upgrading of ICT equipment and installation safety measures 3 - With fairly effective controls in place but needs
improvement

Very Low Physical security of office is secured 3 - With fairly effective controls in place but needs
improvement
 Page 10

Very Low Infra: Building undergoes regular maintenance 3 - With fairly effective controls in place but needs
improvement

Very Low Physical security of office is secured 3 - With fairly effective controls in place but needs
improvement

Very High Upgrading of ICT equipment and installation safety measures 3 - With fairly effective controls in place but needs
improvement

Very Low
 Page 11

NTROL

RISK MITIGATING MEASURES

 Page 12

Action plan to further reduce or mitigate risks if

current controls are not sufficient

Participate in earthquake drill.

 Page 13

Conduct regular repair and maintenance

Put fire exit and fire extinguisher signs for guidance.

1. Work from home strategies for employees affected by office

lockdown (for security purposes); with back-up data/files/program

Improve back-up system

Conduct skills enhancement training, job rotation to familiarize

employees with other work responsibilities.
 Page 14

Conduct regular regular repair and maintenance

Put fire exit and fire extinguisher signs for guidance.

1. Work from home strategies for employees affected by office

lockdown (for security purposes); with back-up data/files/program

Improve back-up system

1. Work from home strategies for employees affected by office

lockdown (for security purposes)
 Page 15

Conduct regular repair and maintenance

1. Work from home strategies for employees affected by office

lockdown (for security purposes)

Improve back-up system