RiskGrid

Score a threat on the standard 5×5 matrix, or model its annualized loss exposure in currency.

01 Inherent Factors

Likelihood — how probable is occurrence?

RareUnlikelyPossibleLikelyAlmost certain

Impact — severity if it occurs

NegligibleMinorModerateMajorSevere

Impact →

Likelihood →

02 Existing Controls

Control effectiveness — how much do current controls reduce this risk?

NonePartialStrongNear-complete

—

Inherent risk

— / 25

Before controls are applied.

—

Residual risk

— / 25

After existing controls are applied.

03 Assessment Summary

01 Loss Exposure Inputs

Currency

Asset value (AV)

Exposure factor (EF) — % of asset lost in a single incident

Annual rate of occurrence (ARO) — expected incidents per year

/ yr

$0SLE × 0ARO = $0ALE

0% of asset value lost per year

Annualized Loss Expectancy is the standard benchmark for justifying security spend — a control costing less than the ALE it mitigates is generally cost-justified.

02 Exposure Summary

Copied to clipboard