|
| Risk Element | Quantitative Inherent Risk Rating | Qualitative Inherent Risk Rating | ||
| Impact | Likelihood | Rating | |||
| 1 | Data Classification | 4 | 5 | 20 | High |
| 2 | Business Requirements | 3 | 4 | 12 | High |
| 3 | Application Development | 2 | 3 | 6 | Medium |
| 4 | Vendor Relationship | 3 | 4 | 12 | High |
| 5 | Technology Landscape | 4 | 5 | 20 | High |
| 6 | Legal/regulatory | 4 | 3 | 12 | High |
| 7 | Brand/reputational | 2 | 3 | 6 | Medium |
| 8 | Operational | 3 | 4 | 12 | High |
| 9 | Financial | 2 | 3 | 6 | Medium |
| 10 | Security and fraud issues | 4 | 5 | 20 | High |
|
| Average |
|
| 12.6 | High |