Risk management & assessment¶

an Alpine marmot stood upright on a rock in a high meadow, whistling the alarm while the rest of the colony forages, and the watch passing between them.

Nothing protects everything, so risk management is mostly the discipline of choosing: what is worth protecting, what realistically threatens it, and where limited capacity does the most good. Treated as the organisation’s own practice rather than a report produced for it, the exercises here map the critical assets, the realistic threats and the current gaps, and turn them into a prioritised roadmap sized to the budget and capacity that actually exist.

A clear picture of risk exposure, prioritised actions, realistic timelines, and documentation that stands up to a board.

Introduction to risk management exercises
Asset identification
Vulnerability identification
How likely, how bad: risk assessment
Treatment options
The risk register
Building a risk model
From exercises to operations

Be honest about exposure

Last updated: 2 July 2026