Risk rating and acceptance
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
rate findings and agree what to do about each.
Planned topics
- Risk is likelihood times impact; rate each on a small scale with a stated rationale.
- Responses: mitigate, transfer, avoid, or accept; acceptance is a decision by someone with authority, not silence.
- Every finding gets an owner, a due date, and a tracked item; accepted risks get an expiry for re-review.
- Be consistent so ratings are comparable across reviews.
Draft outline details
Demonstration
Findings table: ID | description | likelihood | impact | rating | response | owner | due. Example: missing rate limit on login; likelihood high, impact medium; mitigate.
Check your understanding
What must an accepted risk have?
Show answer
A named owner with authority, a rationale, and a review date.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.