Risk Assessment Questionnaire

Risk Assessment Questionnaire

Instructions

Complete this questionnaire to identify and assess risks in your area of responsibility. Provide specific examples where possible.

---

Section A: General Information

| Field | Response | |-------|----------| | Business Unit | | | Assessment Date | | | Completed By | | | Review Period | |

---

Section B: Strategic Risks

B1. Business Objectives

What are your unit's key objectives for this period? 1. 2. 3.

B2. Objective Threats

What could prevent achievement of these objectives?

| Objective | Potential Threats | Likelihood (1-5) | Impact (1-5) | |-----------|-------------------|------------------|--------------| | | | | | | | | | |

B3. Competitive Risks

Describe any competitive threats or market changes affecting your business: [Response]

B4. Change Risks

What significant changes are planned that introduce risk?

| Change/Project | Associated Risks | |----------------|------------------| | | | | | |

---

Section C: Operational Risks

C1. Process Risks

Identify key processes and their risks:

| Process | What Could Go Wrong? | Current Controls | |---------|---------------------|------------------| | | | | | | | |

C2. People Risks

| Risk Area | Yes/No | Comments | |-----------|--------|----------| | Key person dependencies? | | | | Staffing/skill gaps? | | | | Training deficiencies? | | | | High turnover? | | | | Misconduct concerns? | | |

C3. Technology Risks

| Risk Area | Yes/No | Comments | |-----------|--------|----------| | System reliability issues? | | | | Aging technology? | | | | Integration challenges? | | | | Capacity constraints? | | | | Cybersecurity concerns? | | |

C4. Third-Party Risks

List critical vendors and associated risks:

| Vendor | Service | Risk Concerns | |--------|---------|---------------| | | | | | | | |

---

Section D: Compliance Risks

D1. Regulatory Requirements

List applicable regulations and compliance status:

| Regulation | Compliant? | Gaps/Concerns | |------------|------------|---------------| | | Yes/No/Partial | | | | Yes/No/Partial | |

D2. Policy Compliance

Any policy violations or concerns in the period? ☐ None identified ☐ Yes: [Describe]

D3. Audit Findings

Any open audit findings? | Finding | Status | Target Date | |---------|--------|-------------| | | | |

---

Section E: Risk Ranking

List your top 5 risks in priority order:

| Rank | Risk Description | L | I | Score | Trend | |------|------------------|---|---|-------|-------| | 1 | | | | | ↑↓→ | | 2 | | | | | ↑↓→ | | 3 | | | | | ↑↓→ | | 4 | | | | | ↑↓→ | | 5 | | | | | ↑↓→ |

---

Section F: Control Assessment

For your top risks, assess control effectiveness:

| Risk | Key Controls | Effective? | Improvements Needed | |------|--------------|------------|---------------------| | | | Yes/Partial/No | | | | | Yes/Partial/No | |

---

Certification

I confirm that this assessment has been completed accurately to the best of my knowledge.

Signature: _______________ Date: _______________