Repeat the process until all adversaries are completed. NOTES: Limit the time frame for discussion. Take photos of the adversary lists. Impact Ranking: The goal of this exercise is to have the trainee lead the host organization in classifying the severity of the possible impacts from the threats they have just explored. Create a post it for each impact. Place two points on the wall. On one side are "Inconvenient" impacts that disrupt the organization in a very small way. On the other side are "critical" impacts that may pose life-safety risks to employees, partners, or the general public. The low end of the scale may include a fire alarm may cause the staff to lose a half an hour of work time, but does not impact any short or long-term activities. The high end of the scale would include events such as a fire that destroys the organizations headquarters and endangers staffs lives or legal issues that cause termination of the program. Place each item along the severity line from least to most severe impact. Give each item its own place on the scale. No two items can be the same severity. NOTES: Listen carefully to every point of deliberation. As risks are placed on the wall, the trainee can use other already ranked risks to help participants identify the right place. "Is a robbery more or less likely than a fire?" Take photos of the impact scale once you have finished it. Recommendation CREATING A RISK MATRIX Summary Overview Create a risk matrix placing impacts against a range of likelihood. Clean up critical process maps for use in reporting. Page 155 of 240