| # |
Threat Category |
Likelihood (1–5) |
Impact (1–5) |
Risk Score (L×I) |
Existing Controls |
Risk Level |
| 1 |
Unauthorised access / intrusion |
|
|
|
|
|
| 2 |
Theft / burglary |
|
|
|
|
|
| 3 |
Vandalism / criminal damage |
|
|
|
|
|
| 4 |
Assault / violence against persons |
|
|
|
|
|
| 5 |
Internal theft / dishonest employee |
|
|
|
|
|
| 6 |
Tailgating / piggybacking |
|
|
|
|
|
| 7 |
Cyber / electronic attack |
|
|
|
|
|
| 8 |
Fire — accidental |
|
|
|
|
|
| 9 |
Fire — deliberate (arson) |
|
|
|
|
|
| 10 |
Terrorism / hostile reconnaissance |
|
|
|
|
|
| 11 |
|
|
|
|
|
|
| 12 |
|
|
|
|
|
|
| 13 |
|
|
|
|
|
|
Likelihood: 1=Rare 2=Unlikely 3=Possible 4=Likely 5=Almost Certain |
Impact: 1=Negligible 2=Minor 3=Moderate 4=Major 5=Catastrophic |
Risk Level: 1–4=Low 5–9=Medium 10–16=High 17–25=Critical