COMPOSITE RISK MANAGEMENT WORKSHEET For use of this form, contact the East Carolina University Enterprise Risk Management Office. 1. Event or Overall Risk Category: 2a. Date/Time BEGIN 4. PREPARED BY a. FULL NAME 5. SUBTASK b. POSITION/TITLE 7. INITIAL RISK LEVEL 6. HAZARDS/RISKS 2b. Date/Time END 3. DATE PREPARED (YYYYMMDD) c. DIVISION/WORK SECTION 9. RESIDUAL RISK LEVEL 8. CONTROLS 10. HOW TO IMPLEMENT 11. HOW TO SUPERVISE (WHO) 12. WAS CONTR OL EFFECTIVE? Additional space for entries in Items 5 through 11 is provided on Page 2. 13. OVERALL RISK LEVEL AFTER CONTROLS ARE IMPLEMENTED (Check one) LOW MODERATE 14. RISK DECISION AUTHORITY* a. FULL NAME ECU ERM FORM 1000, JAN 2012 b. POSITION/TITLE HIGH EXTREMELY HIGH c. POSITION/TITLE d. SIGNATURE & DATE Page 1 of 2 APD V 2.00 * Note: The designation of the risk decision authority that can approve controls at different OVERALL risk levels is itself a control. Thought should be given to who (Section Chief, Dean, Director, Vice Chancellor, etc.) is designated to approve/sign depending on whether there is a LOW, MOD, HIGH, or EXTREMELY HIGH risk level. ITEMS 5 THROUGH 12 CONTINUED 5. SUBTASK 6. HAZARDS/RISKS ECU ERM FORM 1000, DEC 2011 7. INITIAL RISK LEVEL 8. CONTROLS 9. RESIDUAL RISK LEVEL 10. HOW TO IMPLEMENT 11. HOW TO SUPERVISE (WHO) 12. WAS CONTR OL EFFECTIVE? Page 2 of 2 APD V 2.00 Risk Assessment Matrix HAZARD/RISK PROBABILITY RISK LEVELS Extremely High - Loss of ability to accomplish the mission. FREQUENT S E V E R I T Y CATASTROPHIC CRITICAL LIKELY OCCASIONAL SELDOM UNLIKELY A B C D E I EH EH H H M II EH H H M L Medium - Degrades mission capability. Low - Little or no impact to mission capability. Examples MODERATE III H M M L NEGLIGIBLE IV M L L L L L NOTE: THE BELOW DEFINITIONS ARE EXAMPLES ONLY. DIVISIONS WILL NEED TO DETERMINE WHAT CONSTITUTES THE ASSIGNMENT OF EACH LEVEL/CATEGORY. MEASUREMENTS AND CATEGORIZATIONS WILL DIFFER DEPENDING ON THE LEVEL OF THE ORGANIZATION CONDUCTING THE RISK ASSESSMENT (E.G. A HIGH RISK CONCERN AT A BUSINESS UNIT LEVEL MAY NOT BE HIGH RISK AT THE ENTERPRISE/STRATEGIC LEVEL FOR THE ENTIRE UNIVERSITY. EFFECT 1. CATASTROPHIC - Death or permanent total disability, system loss, major property damage. 2. CRITICAL - Permanent partial disability, temporary total disability, major system damage, major property damage. 3. MODERATE - Minor injury, lost workdays, compensable injury/illness, minor system damage, minor property damage. 4. NEGLIGIBLE - First aid or minor supportive medical treatment, minor system impairment. PROBABILITY A. FREQUENT - Occurs often - resources are continuously exposed. B. LIKELY - Occurs frequently - resources are exposed frequently and/or several times. C. OCCASIONAL - Occurs sometimes - resources are exposed sporadically. D. SELDOM - Remote occurrence - resources are possibly exposed. E. UNLIKELY - Rare occurrence of exposure High - Significantly degrades mission capability. I/A = Extremely High II/B = High III/C = Medium IV/D = Low