Create a list of all services or assets that were identified during the activity that were not already known by the auditor. Materials Needed Stickies Markers Whiteboard or flip-chart Considerations Walkthrough After the activities are complete the auditor has tasks that build upon the outputs of the activities. These can be completed offsite. Create a risk matrix placing impacts against a range of likelihood. Clean up critical process maps for use in reporting. Create a list of all services or assets that were identified during the activity that were not already known by the auditor. High (Risk to Life) Risk Level of Vulnerability Low (Inconvienient) High Low (Will seamlessly integrate with current practice) (Will cause a near perminant disruption to the organizations work) Difficulty to implement recommendation Risk vs Difficulty Page 156 of 240