118. What happens if Risk assessments’s scope changes?
<--- Score
119. What is the scope of Risk assessments?
<--- Score
120. Are there different segments of customers?
<--- Score
121. How have you defined all Risk assessments requirements first?
<--- Score
122. Are users locked out for a defined time period after unsuccessful attempts?
<--- Score
123. Scope of sensitive information?
<--- Score
124. What are the tasks and definitions?
<--- Score
Add up total points for this section: _____ = Total points for this section
Divided by: ______ (number of statements answered) = ______ Average score for this section
Transfer your score to the Risk assessments Index at the beginning of the Self-Assessment.
CRITERION #3: MEASURE:
INTENT: Gather the correct data. Measure the current performance and evolution of the situation.
In my belief, the answer to this question is clearly defined:
5 Strongly Agree
4 Agree
3 Neutral
2 Disagree
1 Strongly Disagree
1. Are missed Risk assessments opportunities costing your organization money?
<--- Score
2. What drives O&M cost?
<--- Score
3. How do you know that any Risk assessments analysis is complete and comprehensive?
<--- Score
4. How is performance measured?
<--- Score
5. How will the Risk assessments data be analyzed?
<--- Score
6. What are the estimated costs of proposed changes?
<--- Score
7. The approach of traditional Risk assessments works for detail complexity but is focused on a systematic approach rather than an understanding of the nature of systems themselves, what approach will permit your organization to deal with the kind of unpredictable emergent behaviors that dynamic complexity can introduce?
<--- Score
8. What relevant entities could be measured?
<--- Score
9. Why a Risk assessments focus?
<--- Score
10. How will effects be measured?
<--- Score
11. Are there any easy-to-implement alternatives to Risk assessments? Sometimes other solutions are available that do not require the cost implications of a full-blown project?
<--- Score
12. When is Root Cause Analysis Required?
<--- Score
13. Where is the cost?
<--- Score
14. How do you verify the authenticity of the data and information used?
<--- Score
15. Are there measurements based on task performance?
<--- Score
16. What charts has the team used to display the components of variation in the process?
<--- Score
17. How do you measure success?
<--- Score
18. Is the scope of Risk assessments cost analysis cost-effective?
<--- Score
19. Is a follow-up focused external Risk assessments review required?
<--- Score
20. Does management have the right priorities among projects?
<--- Score
21. How are measurements made?
<--- Score
22. Does the detection program prioritize areas based on thorough fraud risk assessments?
<--- Score
23. Who pays the cost?
<--- Score
24. What is the cost of rework?
<--- Score
25. How do you quantify and qualify impacts?
<--- Score
26. Are automated tools employed to support near real-time analysis of events?
<--- Score
27. When should you bother with diagrams?
<--- Score
28. How will costs be allocated?
<--- Score
29. What tests verify requirements?
<--- Score
30. How do you do risk analysis of rare, cascading, catastrophic events?
<--- Score
31. What can be used to verify compliance?
<--- Score
32. Have design-to-cost goals been established?
<--- Score
33. What are the types and number of measures to use?
<--- Score
