Status: Complete

Purpose

Translate the highest inherent enterprise risks identified in Project 1 into realistic, decision-oriented risk scenarios. This project focuses on understanding how material risks could realistically unfold, how often they may occur, and what the potential business impact would be, using semi-quantitative analysis.

Objective

To support risk prioritization and future risk treatment decisions by modeling credible loss events for the organization’s top inherent risks and expressing those risks in monetary terms.

Scope

This project focuses on the top three inherent risks based on expected annual loss:

• R-02 — Platform Availability & Reliability
• R-03 — Access / Insider Risk
• R-04 — Data Integrity & Accuracy

Methodology

Risk scenarios were developed using a structured, scenario-based risk analysis approach:

• Identified a plausible triggering event for each risk
• Defined threat source, affected assets, and vulnerabilities
• Modeled impact progression from technical failure to business consequence
• Estimated likelihood (ARO) and single-loss impact (SLE) using documented assumptions
• Calculated expected annual loss (ALE) to express inherent risk exposure in monetary terms