Skip to content
Risk and incidents

Risk and incidents

What could go wrong, how bad it would be, what you are doing about it — and what to do on the day it does.

Updated

The Risk group holds the forward-looking half of the programme: scenarios you have identified, scored and are treating. Incidents holds the other half — the things that actually happened.

They connect. An incident is often a scenario you had already written down, and reading them together is what tells you whether your scoring was any good.

In this section

  1. Registers and scenarios

    Where risks live, and how to write one worth reading

  2. Scoring, treatment and appetite

    Inherent versus residual, the four treatments, and the line you set

  3. Handling an incident

    Logging, triage, resolution — and the DORA classification clock