Rewrite a vague risk into a cause-event-impact statement that supports assessment and response.
The move: write the risk as cause -> event -> impact. Cause Name the condition that makes the risk plausible. This can be dependency, weak control, changing regulation, capacity constraint, aging technology, unclear ownership, or external volatility. Event State the possible occurrence or change. The event should be concrete enough to assess under current controls. Avoid turning the impact into the event. Impact Tie the consequence to an objective: revenue, safety, resilience, compliance, liquidity, customer trust, delivery date, or strategic option value. Treatment clue A good statement hints where treatment should focus. If the cause is unclear ownership, the treatment…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in