RISK ASSESSMENT REPORT Template
Information Technology Risk Assessment For

Risk Assessment Annual Document Review History

The Risk Assessment is reviewed, at least annually, and the date and reviewer recorded on the table below.

| Review Date |Reviewer |
| | |
| | |
| | |

Table of Contents

1 INTRODUCTION 1

2 IT SYSTEM CHARACTERIZATION 2

3 RISK IDENTIFICATION 6

4 CONTROL ANALYSIS 8

5 RISK LIKELIHOOD DETERMINATION 11

6 IMPACT ANALYSIS 13

7 RISK DETERMINATION 15

8 RECOMMENDATIONS 17

9 RESULTS DOCUMENTATION 18

LIST OF EXHIBITS
Exhibit 1: Risk Assessment Matrix 18

List of Figures
Figure 1 – IT System Boundary Diagram 4
Figure 2 – Information Flow Diagram 5

List of Tables
Table A: Risk Classifications 1
Table B: IT System Inventory and Definition 2
Table C: Threats Identified 4
Table D: Vulnerabilities, Threats, and Risks 5
Table E: Security Controls 6
Table F: Risks-Controls-Factors Correlation 8
Table G: Risk Likelihood Definitions 9
Table H: Risk Likelihood Ratings 9
Table I: Risk Impact Rating Definitions 13
Table J: Risk Impact Analysis 13
Table K: Overall Risk Rating Matrix 15
Table L: Overall Risk Ratings Table 15
Table M: Recommendations 17
1 INTRODUCTION

Risk assessment participants: