Reporting results from a risk analysis can seem like a daunting and cumbersome task. Even after a lot of work, key stakeholders may walk away without a good understanding of what the results truly mean.
“I don’t know.”
“I have no idea.”
“Where would I get that information?”
“I have no way of getting that information.”These are just a couple of the common responses we see when someone first attempts an analysis.
In any effective risk management program, you will find a team of dedicated analysts armed with robust analyses. However, an analysis is only as effective as the rationale. I have identified five simple components that help in any risk assessment, with the FAIR model or other methods.
Why is your risk analysis taking weeks or months, instead of hours or days?
Why don’t stakeholders take your results at face value?
What books should I buy?
How many hours should I study?
What should I study?
Some of you are asking these questions.