Sample

12/15/2014

e.g. Policy

e.g. Stakeholders

e.g. Budget

OBJECTIVE

e.g. Systems

This prompt row

can be hidden to
provide more page
space.

DRAFT

Risk Management Branch Risk Register Template version December 17, 2012
RISK IDENTIFICATION

OBJECTIVE
(State the plan
objective this event
effects.)

RISK EVENT

What is it that you are working to avoid or

What planning objective reduce the likelihood or impact of occurring?
does this event affect.
Risks are future events that could interfere
with achievement of objectives.

1.3 Timely service

delivery to citizens.

Invoice delivery to clients is slow and

inaccurate.

IN

RISK CAUSE

IMPACT/ CONSEQUENCE

What are the triggers, sources or

circumstances that could act alone or
together to increase the likelihood of the Risk
Event occurring? There are usually multiple
causes leading to a Risk Event.

If this Risk Event did occur, how would it impact objectives? What are
the longer-term or cumulative consequences?

- Legacy system is incompatible with data

input requirements.
- Data entry practices inconsistent
- Manual data checks

Province of British Columbia

- Unmet client service quality performance

- Increased A/R
- Increased risk of loss
- Increased cost of recovery

How likely?

FOR DISCUSSION PURPOSES

CATEGORY

12/15/2014

20

EXTREME

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED

EXISTING MITIGATIONS

L
(1-5)

C
(1-5)

What are you doing now to reduce the likelihood or

impact of the event?

How severe?

RISK RATING

How likely?

SUM

How severe?

C
(1-5)

DRAFT

Objective
of the risk
assessment.
Risk Management Branch
Risk Register
Template
version December 17, 2012
INITIAL RISK RATING

FOR DISCUSSION PURPOSES

INHERENT RISK RATING

- Manual data checks

- Training manual

Province of British Columbia

SUM

RISK RATING

EVALUATION
ADEQUACY OF EXISTING MITIGATIONS

Non-existent, Inadequate, Adequate, Robust, Excessive

12

HIGH

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED

Inadequate

FOR DISCUSSION PURPOSES

ACTION

ADDITIONAL MITIGATIONS

DELIVERABLE

What form will this mitigation

Will you treat, monitor,
take e.g. a project plan, a report,
What else are you going to do to better manage the risk?
transfer or avoid the risk?
Treasury Board submission,
other?

Long term:
- System replacement
Treat

12/15/2014

DRAFT

Risk Management Branch Risk Register Template version December 17, 2012
MITIGATIONS MANAGEMENT

ATION

Short term:
- Update training manual
- Commit more staff time.

- re System replacement
strategy
- Revised training manual and
web counterpart
- Staffing solution for short term

REQUIRED RESOURCES

What is needed to develop and implement the

mitigation?

TASK OWNER

Who will take the lead on this

When is the deliverable to be ready?
mitigation?

re System replacement strategy: Confer with IT

Director and budget shop to confirm process and
criteria for business case.

re Systems replacement:
Tom

Re Training manual: Assign lead

re Training manual: Sarah

Re Staff assignment: Review workload breakdown

and skills set.

re Staff review: Tom

Province of British Columbia

DUE DATE

re System replacement strategy:

- End of fiscal
re Training manual:
- February 14th
re Staffing review and
recommendation:
- February 7th

FOR DISCUSSION PURPOSES

DEPENDENCIES/ INTERRELATIONSHIPS

Risk Management Branch Risk Register Template version December 17, 2012
TRACKING
PROGRESS %

COMMENTS/ ISSUES

FURTHER ACTION

COMPLETION DATE

RESIDUAL RISK RATING

DRAFT
RISK TOLERANC

CURRENT RISK RATING

L
(1-5)

C
(1-5)

SUM

L
(1-5)

C
(1-5)

SUM

L
(1-5)

C
(1-5)

SUM

L
(1-5)

8.00

MEDIUM

12.00

HIGH

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED

Does the event or mitigation rely on

another team or organization? Does it
impact another group?

System shared with MFAS.

12/15/2014

25% - Initial planning complete.

Implementation expected once
additional staff sourced.

Further progress is dependant

upon staffing approval

Province of British Columbia

FOR DISCUSSION PURPOSES

RISK TOLERANCE RATING
C
(1-5)

SUM

8.00

MEDIUM

0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED
UNRATED

12/15/2014

Risk Management Branch Risk Register Template version December 17, 2012

Province of British Columbia

DRAFT

LIKELIHOOD AND CONSEQUENCE DESCRIPTORS FOR RISK ASSESSMENTS

Likelihood

Rating

Criteria

Probability

Almost certain

It is expected to happen. Will certainly happen this fiscal 80% to 100% or once a year or more
year or during the three year period of the Service Plan. frequently

Likely

Possible

Unlikely

We expect it to happen. It would be surprising if this did 61% to 79% or once every 3 yrs
not happen.
Just as likely to happen as not. We don't expect it to
40% to 60% or once every 5 yrs
happen, but there is a chance.
Not anticipated. We won't worry about it happening.
11% to 39% or once every 15 years

Almost certain not to happen

Consequence

Catastrophic

It would be surprising if this happened. There would

have to be a combination of unlikely events for it to
happen.

Rating

Major

Moderate

Minor

Insignificant

0 to 10% or once every 25 yrs

Criteria / Examples
- Major problem from which there is no recovery.
- Significant damage to ministry credibility or integrity.
- Complete loss of ability to deliver a critical program.
- Event that requires a major realignment of how
service is delivered.
- Significant event which has a long recovery period.
- Failure to deliver a major political commitment.
- Recovery from the event requires cooperation across
departments.
- May generate media attention.
- Can be dealt with at a department level but requires
Executive notification.
- Delay in funding or change in funding criteria.
- Stakeholder or client would take note.
- Can be dealt with internally at the branch level.
- No escalation of the issue required.
- No media attention.
- No or manageable stakeholder or client interest.

Risk Rating Matrix

5
4
3
2
1
LIKELIHOOD

LOW
LOW
LOW
LOW
LOW
1

MED
MED
MED
LOW
LOW
2

HIGH
HIGH
MED
MED
LOW
3

CONSEQUENCE

EXT
HIGH
HIGH
MED
LOW
4

EXT
EXT
HIGH
MED
LOW
5

LxC
Score 0 Score 6 Score 12 Score 20 -

5
10
16
25

=
=
=
=

Low
Medium
High
Extreme

CONTEXT TEMPLATE
ESTABLISH CONTEXT
Purpose: establish scope, criteria, and deliverable for a particular risk assessment
1. State the subject of the risk analysis (e.g., strategic plan; business case; project agreement) and its scope
with respect to organisations involved, intended audience and time frame.
Text text text.
2. State goals and objectives of the program or plan in question.
Text text text.
3. State the mission, vision, operating principles and any other value criteria.
Text text text.
4. Identify stakeholders ; determine their influence on the process; methods of consultation and
communciation, as appropriate.
Text text text.
5. Set out assumptions and constraints (deadlines, time-frames, environmental factors, executive or political
directives).
Text text text.

Prepared by Risk Management Branch 12/15/2014

Page 7

RISK MANAGEMENT PROCESS: OVERVIEW

1. The CONTEXT defines the scope and objectives of the

2. IDENTIFY risks by asking ,"What could occur that would

have an impact on our objectives?" Risks have three key

3. Risks ANALYSIS involves ranking the likelihood and

consequence using a 1-5 scale See tab 2 for guidance.

4. In order to EVALUATE risks the group reviews the

effectiveness and appropriateness of currents controls
and determines what action to take, if any.

5. Risk TREATMENT is the activity (s) you are going to

implement to better manage your exposures. Your
mitigations will reduce the likelihood and/or consequence

Prepared by Risk Management Branch 12/15/2014

Page 8