1: Extensive changes to interfacing/downstream Impact on interfacing/downstream systems systems due to new or changed 2: Minor changes functionalities 3: No Changes Application features and functions Availability of downstream systems 1: High Availability User experience Risk needs to be selected based if it (Informational/Marketing) important for consumers 1: Online website retailing, Financial transactions, External/Internal Consumers Enterprise-wide use(Internal) 2: Group-wide (Internal) 1: Timeliness of documents is critical, e.g. news Document management agency 2 or 3: Otherwise 1: Time critical workflow (e.g.: documents must be Consumer Type scanned and Imaging system made available quickly) 2 or 3: Otherwise 1: Service level penalties if late; First mover advantage, business, competitive edge (in case of Business intelligence and analytics Large volumes of data analysis, tight reporting deadlines or regulatory filings) 2 or 3: Weekly, monthly, quarterly reporting Technology Risk Risk Factor Risk Levels Category 1: requires a performance check 2: depends on other extenuating factors 3: does not require a performance test 1: Extensive Changes or Migration (e.g. .Net to Technology stack Changes Java) 2: or 3: Well-known and stable 1 or 2: Web Clients changes like asynchronous Client Changes Web server requests 3: No Changes 1: New plug-ins or new connections to System level Web Server Changes application servers 1: Services added or modified with suspected Application Server Changes performance impact 1: Impact to database partitioning scheme; Database Server Changes Requirement to access historical information 1/2: New tables to high volume transaction
Application features and functions Impact on interfacing/downstream systems due to new or changed functionalities 1: Extensive changes to interfacing/downstream systems 2: Minor changes 3: No Changes Availability of downstream systems 1: High Availability User experience (Informational/Marketing) Risk needs to be selected based if it important for consumers Consumer Type External/Internal Consumers 1: Online website retailing, Financial transactions, Enterprise-wide use(Internal) 2: Group-wide (Internal) Document management 1: Timeliness of documents is critical, e.g. news agency 2 or 3: Otherwise Imaging system 1: Time critical workflow (e.g.: documents must be scanned and made available quickly) 2 or 3: Otherwise Business intelligence and analytics 1: Service level penalties if late; First mover advantage, business, competitive edge (in case of Large volumes of data analysis, tight reporting deadlines or regulatory filings) 2 or 3: Weekly, monthly, quarterly reporting Technology Risk Category Risk Factor Risk Levels 1: requires a performance check 2: depends on other extenuating factors 3: does not require a performance test System level Technology stack Changes 1: Extensive Changes or Migration (e.g. .Net to Java) 2: or 3: Well-known and stable Client Changes 1 or 2: Web Clients changes like asynchronous Web server requests 3: No Changes Web Server Changes 1: New plug-ins or new connections to application servers Application Server Changes 1: Services added or modified with suspected performance impact Database Server Changes 1: Impact to database partitioning scheme; Requirement to access historical information 1/2: New tables to high volume transaction