Threat event could be expected to have multiple severe or catastrophic Very High 96-100 10 adverse effects on organizational operations, organizational assets, individuals, other organizations, or the Nation. Threat event could be expected to have a severe or catastrophic adverse High 80-95 8 effect on organizational operations, organizational assets, individuals, other organizations, or the Nation. Threat event could be expected to have a serious adverse effect on Moderate 21-79 5 organizational operations, organizational assets, individuals, other organizations, or the Nation. Threat event could be expected to have a limited adverse effect on Low 5-20 2 organizational operations, organizational assets, individuals, other organizations, or the Nation. Threat event could be expected to have a negligible adverse effect on Very Low 0-4 0 organizational operations, organizational assets, individuals, other organizations, or the Nation. Risk Assessment Results Table 6: Risk Assessment Results Vulnerabilities / Impact Risk Likelihood Threat Event Predisposing Mitigating Factors (Table 2 or 3) (Table 4) (Table 5) Characteristics e.g. Hurricane Power Outage Backup generators Moderate Low Low * Likelihood / Impact / Risk = High, Moderate, Low, or Very Low APPENDIX A Risk Assessors (team or individuals and contact information) APPENDIX B Supporting Evidence (for reciprocity / subsequent risk assessments)
Very High 96-100 10 Threat event could be expected to have multiple severe or catastrophic adverse effects on organizational operations, organizational assets, individuals, other organizations, or the Nation. High 80-95 8 Threat event could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, individuals, other organizations, or the Nation. Moderate 21-79 5 Threat event could be expected to have a serious adverse effect on organizational operations, organizational assets, individuals, other organizations, or the Nation. Low 5-20 2 Threat event could be expected to have a limited adverse effect on organizational operations, organizational assets, individuals, other organizations, or the Nation. Very Low 0-4 0 Threat event could be expected to have a negligible adverse effect on organizational operations, organizational assets, individuals, other organizations, or the Nation. Risk Assessment Results Table 6: Risk Assessment Results Threat Event Vulnerabilities / Predisposing Characteristics Mitigating Factors Likelihood (Table 2 or 3) Impact (Table 4) Risk (Table 5) e.g. Hurricane Power Outage Backup generators Moderate Low Low * Likelihood / Impact / Risk = High, Moderate, Low, or Very Low APPENDIX A Risk Assessors (team or individuals and contact information) APPENDIX B Supporting Evidence (for reciprocity / subsequent risk assessments)