All risks

● ● ● Risk matrix

	Impact →	Negligible (A)	Marginal (B)	Considerable (C)	Critical (D)	Catastrophic (E)
Consequence	Environment (IE)	Slight effect	Minor effect	Localized effect	Major effect	Massive effect
	Asset (IA)	Slight damage	Minor damage	Medium damage	Major damage	Extensive damage
	Health (IH)	Slight physical or mental harm	Minor physical or mental harm	Major physical or mental harm	Single fatality	Multiple fatalities
	Business continuity (IB)	Minor visible or barely recognizable disruption of service	Recognizable temporary disruption of service	Minor functional (permanent) disruption of service	Major functional (permanent) disruption of service	Complete outage of service
	Data protection (ID)	No data loss / no data disclosure	Loss of rebuildable secondary data, disclosure of public data	Loss of easily recoverable data, disclosure of internal data	Loss of recoverable data, disclosure of some protected data	Irrecoverable data loss, full disclosure of protected data
↓ Probability (within 5yrs)	Certain (5) 81-100%	A5	B5	C5	D5	E5
	Likely (4) 61-80%	A4	B4	C4	D4	E4
	Possible (3) 41-60%	A3	B3	C3	D3	E3
	Unlikely (2) 21-40%	A2	B2	C2	D2	E2
	Improbable (1) 0-20%	A1	B1	C1	D1	E1

ID	Page name	Type	Risk domain	O Factor	M Factor	Current Level	Current Probability	Current Impact	Inci­dents
AS1	Mobile devices	Asset Data protection	External	C3	B3	Low	Possible	Marginal	1