Difference between revisions of "Risk Analysis"

From Open Risk Manual
 
Line 1: Line 1:
 
== Definition ==  
 
== Definition ==  
'''Risk Analysis''' (also ''Risk Assessment'') is a set of analytic and/or quantitative activities that supports [[Risk Management]] that may or may not be dependent on risk models, but typically does involve structured analysis and interpretation of data. Overall process of [[Risk Identification]], risk analysis, and risk evaluation.  
+
'''Risk Analysis''' (also ''Risk Assessment'') is a set of analytic and/or quantitative activities that supports [[Risk Management]]. It can be considered the union of the two first pillars of a formal [[Risk Management Framework]] (thus not including [[Risk Mitigation]]).  
  
It denotes the process of identifying the risks to an organization, assessing the critical functions necessary for an organization to continue business operations, defining the controls in place to reduce organization exposure and evaluating the cost for such controls.  Frequently the quantification of threats to an organization and the probability of them being realized.
+
== Approach ==
 +
Risk analysis entails identifying the risks to an organization, assessing the critical functions necessary for an organization to continue business operations, defining the controls in place to reduce organization exposure and evaluating the cost for such controls.  Frequently it involves also the quantification of threats to an organization and the probability of them being realized.
  
 
== Application Domains ==
 
== Application Domains ==
Line 12: Line 13:
 
* [[Business Impact Analysis]]
 
* [[Business Impact Analysis]]
 
* [[Disaster Risk Assessment]]
 
* [[Disaster Risk Assessment]]
 +
* [[Energy Risk Analysis]]
  
== Methodologies and Approaches ==
+
== Methodologies ==
 +
Risk analysis may or may not be dependent on quantification and [[Risk Model | risk models]], but typically does involve structured analysis and interpretation of data. Overall process of [[Risk Identification]], risk analysis, and risk evaluation.
 
* [[Root Cause Analysis]]
 
* [[Root Cause Analysis]]
 
* [[Barrier Analysis]]
 
* [[Barrier Analysis]]
 
* [[Bow-Tie Analysis]]
 
* [[Bow-Tie Analysis]]
 +
 +
== See Also ==
 +
* [[Energy Risk Analysis]]
  
 
----
 
----
 
[[Category:Risk Analysis]]
 
[[Category:Risk Analysis]]
 
[[Category:Business Impact Analysis]]
 
[[Category:Business Impact Analysis]]

Latest revision as of 15:09, 11 March 2024

Definition

Risk Analysis (also Risk Assessment) is a set of analytic and/or quantitative activities that supports Risk Management. It can be considered the union of the two first pillars of a formal Risk Management Framework (thus not including Risk Mitigation).

Approach

Risk analysis entails identifying the risks to an organization, assessing the critical functions necessary for an organization to continue business operations, defining the controls in place to reduce organization exposure and evaluating the cost for such controls. Frequently it involves also the quantification of threats to an organization and the probability of them being realized.

Application Domains

The notion encompasses a large number of activities within organisations (and in particular such as banks and insurance companies where the management of risk has dominant role), for example:

Methodologies

Risk analysis may or may not be dependent on quantification and risk models, but typically does involve structured analysis and interpretation of data. Overall process of Risk Identification, risk analysis, and risk evaluation.

See Also