# Risk assessment and decision

When a decision affects several teams, has serious consequences or involves unclear authority.

## Decision and authorized owners

[Add known information or your judgment. Mark unknowns for follow-up and explain when a field does not apply.]

## Conditions, event and affected people

[Add known information or your judgment. Mark unknowns for follow-up and explain when a field does not apply.]

## Existing controls and evidence they work

[Add known information or your judgment. Mark unknowns for follow-up and explain when a field does not apply.]

## Remaining risks and unknowns

[Add known information or your judgment. Mark unknowns for follow-up and explain when a field does not apply.]

## Immediate containment and other options

[Add known information or your judgment. Mark unknowns for follow-up and explain when a field does not apply.]

## Business, data, operations and specialist owners

[Add known information or your judgment. Mark unknowns for follow-up and explain when a field does not apply.]

## Decision, expiry and review conditions

[Add known information or your judgment. Mark unknowns for follow-up and explain when a field does not apply.]

## Stop and recovery authority, and people to notify

[Add known information or your judgment. Mark unknowns for follow-up and explain when a field does not apply.]

## Check your work

Assign authorized owners to consequential risks; a vote cannot bypass specialist requirements.

© 2026 FDE01. For personal study; team use and redistribution require written permission.