Financial Services IT Risk Assessment Form
Assessment Date
Assessed By
Department/Team
IT System/Service Name
Description of IT System/Service
Risk Identification
Risk Name
Risk Description
Potential Threats
Vulnerabilities
Business Impact
Risk Assessment
Likelihood
Low
Medium
High
Impact Level
Low
Medium
High
Overall Risk Rating
Low
Medium
High
Existing Controls
Existing Controls
Control Effectiveness
Effective
Needs Improvement
Ineffective
Risk Treatment & Actions
Action Plan / Mitigation Steps
Responsible Person
Target Completion Date
Status
Open
In Progress
Closed