Scenario Summary
- Short description of the linked scenario (1–3 lines max)
Affected Asset(s)
Risk Evaluation
Likelihood
- Rare / Unlikely / Possible / Likely
- Justification
Impact
- Minor / Moderate / Major / Critical
- Justification
Risk Level
- Low / Medium / High / Critical
Risk Treatment Decision
- Accept / Mitigate / Transfer / Avoid
Justification
Associated Controls
- References to Control Framework only (no duplication of control logic)
Residual Risk
- Remaining exposure after treatment
Monitoring Approach
- What signals or observations would indicate the risk materializing or increasing
Review & Lifecycle
- Status: Open / In Progress / Mitigated / Accepted / Closed
- Last Review:
- Next Review:
Owner
Notes
- Additional context or assumptions