Risk assessment and disagreement

Write each item as: because [cause], there is a possibility that [event], resulting in [effect]. Include opportunities as well as threats.

Inherent and residual exposure

Inherent exposure is assessed before named controls. Residual exposure is assessed after controls whose effect is credible and verifiable. A planned action alone does not automatically reduce exposure.

The matrix multiplies two ordinal ratings only to create a transparent priority aid. Always show likelihood and impact beside the band. Do not describe the score as a measured probability or expected loss.

For an opportunity, the same ordinal combination describes favorable potential, not harmful exposure. Report opportunities separately, use favorable language and color, and never treat higher opportunity potential as a critical threat.

Group assessment

Collect individual or subgroup assessments before deciding the accepted register rating. Record assessor, likelihood, impact, confidence, rationale, and evidence. A large spread is a discussion signal: participants may have different information, time horizons, affected groups, or interpretations.

Never average away a material minority assessment. Preserve the reasoning and any reservation in the report.