Step 4: Treat your risks

Develop a Risk Action Plan for each risk

Now that you have scored your organisation’s risks, you will need to develop a Risk Action Plan for each of the risks that have a score of medium or high (a risk value 60 or over).

Risks on the threshold level may or may not need action, depending on your tolerance of risk. Risks below the threshold can generally be considered acceptable and therefore do not require any action to be taken.

Use the Risk Action Plan in the calculator

Go to your risk action plan by clicking on the Risk Action Plan worksheet in the Risk Calculator. The calculator will have sorted your high and medium risks into the Risk Action Plan.

The Risk Action Plan documents all your indicative controls. Identify which indicative controls your organisation is already doing and which ones need to be put in place. Enter these into the Risk Action Plan. Assign responsibility and a time frame for the actions your organisation needs to take.

Risk Calculator

How to use the Risk Calculator (PDF, 550 Kb)

» Go to Step 5: Monitor and review your risks