Create Risk Assessment Report

Step 11 in the recommended risk assessment process is "Create risk assessment report". This page expands on that step.

The risk assessment report may contain or reference a risk action plan which is the plan of action to take in order to reduce or transfer risk.

The risk assessment report will include the conclusions found during the risk assessment process and will provide recommendations for controls to be implemented. The report will either provide or reference a plan of action indicating controls to implement, possible steps for implementation, and the ranking of the most important controls to the least important controls. The plan of action will also indicate who is responsible for approving the controls to be implemented and who will implement the controls.

The Risk Mitigation Actions page provides some steps including ranking actions, evaluating controls, determining highest priority for control options, assigning responsibility and creating a plan to implement the control options.