Back to Top
Enterprise Risk Management

Resources and Tools

Risk Assessment form

The Risk Assessment form is used to collect University wide information about risks so that the risk culture and appetite can be understood.

Risk Map

A risk map, or heat map, is a visual tool to help understand the likelihood and impact of a risk. Risks requiring immediate focus appear in the red area, medium-focus risks are in the yellow area, and low-focus risks are in the green area. The most important risks are highly likely and highly impacting; the least important risks are highly unlikely and not very impacting. By plotting multiple risks, actionable risk mitigation priorities may be established.

Calculate Risk Score

Using the table below, assess the financial and/or reputational impact.



(Financial / Reputational)


Greater than $50 million or
Extreme reputational impact

4 $25 million to $50 million or
High reputational impact


$5 million to $25 million or
Medium to low reputational impact


$100,000 to $5 million or
Low to no reputational impact


Less than $100,000 or
No reputational impact

 *Impact x Likelihood = Risk Score

Determine the risk likelihood. 





Almost certain; expected to occur


Likely; probably will occur


Possible; might occur at some time


Unlikely; could occur at some time


Rare; may occur


Multiply the two numbers, the resulting product is the risk score. Use the table below to determine your immediate response strategy.

Risk Score*


Immediate Actions

Very High Risk

Extreme financial loss; extreme reputational impact

Requires essential and immediate allocation and organization of resources to manage/mitigate the risk; establish plans and countermeasures.

High Risk

High financial loss; high reputational impact

Requires priority allocation of resources for management and/or mitigation; establish plans and countermeasures.

Moderate Risk

Moderate financial loss; medium to low reputational impact

Allocation of resources for study is desirable; risk should be monitored for increases in impact or likelihood.

Low Risk

Low financial loss; low to no reputational impact

Generally does not require action, but should be reviewed periodically.

Very Low Risk

Negligible financial loss; no reputational impact

No action required.

*Impact x Likelihood = Risk Score

The risk score results can be plotted on a HEAT MAP. While this is useful data and will give us a starting point to narrow down the risks, it is not the only input we will use to do our RISK RANKING.

Last Updated: April 8, 2016

Give us feedback about this page Submit Feedback