Risks associated with a consequence identified can be assessed using the default risk assessment matrix or by creating a matrix that suits your organisational needs.
Step 1: To assess the risk associated with a consequence identified, double click on the consequence element you wish to risk assess. Head to the element description box found on the bottom left corner of the Diagram Editor. Click on the + Add button.
Step 2: Choose the type of risk you would like displayed; Initial or Residual risk.
Step 3: Choose a category i.e. people, asset, environment or reputation from the drop-down list. This will then display a risk assessment matrix.
Step 4: Click on the level of risk associated with this risk category for the consequence that is being assessed. Click save.
The level of risk for the category selected, in this example, Asset: A and Residual Risk: B1 will be displayed on the consequence element.
To add other risk categories, follow the steps above and choose a different category type in Step 3.
To delete a risk category and level of risk, double click on the consequence element. Head to the element description box found on the bottom left corner of the Diagram Editor. Click on the ‘x’ button found next to the level of risk you wish to delete.