General / Intersectorial 16 elementos
Enterprise Risk Assessment (ISO 31000)
Esta lista de verificación está en inglés.
A structured risk assessment following the ISO 31000 process of identification, analysis, evaluation, and treatment.
ISO 31000
PDF o Word gratuito · introduzca su correo electrónico para descargar.
Scope, Context & Criteria
- Is the scope and objective of the risk assessment defined? *
- Are internal and external context factors identified? *
- Are risk criteria (likelihood/consequence scales and tolerance) defined? *
Risk Identification
- Have risks and their sources been systematically identified? *
- Are relevant stakeholders engaged in identifying risks? *
- Are risks recorded in a risk register? *
Risk Analysis
- Is each risk analyzed for likelihood and consequence? *
- Are existing controls and their effectiveness considered? *
- Is the analysis method (qualitative/quantitative) documented? *
Risk Evaluation
- Are analyzed risks compared against risk criteria to prioritize? *
- Are decisions on which risks need treatment documented? *
- Overall residual risk rating: *
Treatment & Monitoring
- Are treatment options selected and owners assigned for each priority risk? *
- Is a treatment plan with actions and timelines documented? *
- Are risks monitored and the register reviewed on a defined cadence? *
- Assessor sign-off: *
Descargue la lista de verificación Enterprise Risk Assessment (ISO 31000) completa
Obténgala gratis como PDF limpio e imprimible o como documento de Word editable.