Risk assessment
Risk assessment scores every open Risk each quarter, links each to the Controls that treat it, and sends the result to an officer to accept.
Outcome
| Part | This Process |
|---|---|
| Outcome | Each open Risk is scored every quarter, linked to the Controls that treat it, and treated or accepted by an officer. |
| Reads | Risk |
| Leaves | Risk, Decision, Message |
| Runs in | Each Startup |
Accountable
Risk Analyst, Operations Team.
Responsible: Risk Analyst.
Consulted: Security Engineer, Finance Lead, Legal Lead.
Informed: Founder.
Workflows
| Workflow | Runs | Team |
|---|---|---|
| Assess risks | every quarter | Operations Team |
Who does each step
| Workflow | Step | Role | Calls | Approval |
|---|---|---|---|---|
| Assess risks | 1. List every open Risk and every Risk past its review date. | Risk Analyst | Risk.list | None |
| Assess risks | 2. Score each Risk’s likelihood and impact from the Startup’s records. | Risk Analyst | Risk.assess | None |
| Assess risks | 3. Link each Risk to the Controls that lower it. | Risk Analyst | Risk.treat | None |
| Assess risks | 4. Send each Risk left above its target to the Founder to accept or fund. | Founder | Risk.accept | Asks first; waits 1 business hour |
| Assess risks | 5. Send the Founder the quarter’s risk register. | Risk Analyst | Message.create | None |
Events
| Direction | When | What happens |
|---|---|---|
| In | Every quarter | Starts Assess risks |
| Out | Risk.assessed | Raised by step 2 of Assess risks |
| Out | Risk.treated | Raised by step 3 of Assess risks |
| Out | Risk.accepted | Raised by step 4 of Assess risks |
| Out | Message.created | Raised by step 5 of Assess risks |
Plays
No Play names this Process.
Controls
No Control names this Process or a Workflow of it.
Settings
None.
Failure
A failed step retries; when retries run out, the Action goes to the Risk Analyst.
Loop
No loop: the path is never randomized, because it serves Risk assessment.
Code
Turn on risk assessmentEnable
On by default for every Product Template. Process.pause stops new Actions; Actions in progress finish.
Example
At the end of the quarter, the Risk Analyst rescores 14 open Risks and closes two. The Founder signs the acceptance of the one Risk the Startup carries untreated.