Treat risk modeling data with the utmost security
Ensure that any physical notes/drawings are erased and destroyed once digitally
recorded.
Ensure that any digital recordings of this process are kept secure and encrypted.
Walkthrough
Additional Material
Chart Paper / whiteboard.
Marker pens / whiteboard markers.
Multiple colors of post-its.
Camera for documenting the process.
GETTING STARTED
Prepare a flipchart / space on the white-board to keep track of process', threats,
impacts, and adversaries that are identified during other activities. Participants can
easily get ahead of the process as they explore individual ideas. Keeping a space for
these "upcoming" activities will help re-center them on the activity at hand.
CONDUCTING THE ACTIVITY
Pre-Mortum Strategy: (30 Minutes) The pre-mortum strategy was devised to take
participants out of a perspective of defending their plans and strategies and shielding
themselves from flaws. They are given "a perspective where they [are] actively searching
for flaws in their own plan." 69
Explain the pre-mortum activity. The participants are to imagine that it is months into
the future and they have continued doing their work as normal. And something
happened that left them entirely unable to function or functioning at a very poor
level. "That is all they know; they have to explain what has happened." 70
Create a broad list of possible explanations for what has happened.
Identify the most likely explanations.
List the process' that would have to fail for those causes to take effect.
Identify two to three process' that are central to the failures and write them on a list
of critical process'.
Process/Interaction Mapping (30 minutes per process):
Pick a process from the list ofcritical processes identified above.
Clearly identify the process name on the whiteboard or flipchart.
Page 143 of 240
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents