
46 ◾ How to Complete a Risk Assessment in 5 Days or Less
and identified any existing controls or safeguards in place. When that process was
completed, the team examined each threat for probability of occurrence and the
impact to the business process. e team examined each threat using the existing
controls as a guide. e result of this activity was to assign a relative risk level to
each threat.
Once the risk levels were established, the team identified possible controls that
could reduce the threat risk level to an acceptable range. e team then reviewed
the probability and impact of those specific threats to see whether the new or addi-
tiona ...