The table below contains questions to ask when doing a Risk Assessment. If the total computed score is greater than or equal to 8, the risk is high; if the total score is less than 8, the risk is low.
|
Questions |
Weight |
Score |
|---|---|---|
|
1. Experience baseline: Have we done something similar before? |
|
|
|
On a regular basis, we do something similar |
1 |
|
|
Rarely have we done something like this |
2 |
|
|
We have never done this before |
4 |
|
|
2. Complexity: How difficult, how many dependencies, and how many skill sets or people are required? |
|
|
|
Simple, little or no dependencies |
1 |
|
|
Moderate, few dependencies |
2 |
|
|
Complex, many dependencies |
4 |
|
|
3. Disruption: Potential for unplanned outage or disruption related to changed Configuration Item or Service. |
|
|
|
No disruption |
1 |
|
|
Service disruption to a non-critical function |
2 |
|
|
Service disruption to a critical business function |
4 |
|
|
4. Ability to test. |
|
|
|
Full test (full test environment available) |
1 |
|
|
Limited test (only some components) |
2 |
|
|
No testing available |
4 |
|
|
5. Ability to back out. |
|
|
|
The change can be backed out without additional impacts |
1 |
|
|
The change can be backed out via system restore |
2 |
|
|
No back-out is possible |
4 |
|
|
Total Calculated Score |
|
|