$3$

$.$

$2$

$$Use the evaluation matrix

$($

Table

$2$

$)$

$$to draft a risk and control self

$-$

assessment for the company. Using the

$6$

$$identified inherent risks, rate the control measures to determine the priority to manage the residual risk. Complete Table

$3$

$$for your answer.

$($

$1$

$2$

$)$

$$

Table

$2$

: Evaluation matrix IMPACT

$<$

$=$

$5$

$\%$

$6$

$\%$

$-$

$1$

$0$

$\%$

$1$

$1$

$\%$

$-$

$1$

$5$

$\%$

$1$

$6$

$\%$

$-$

$2$

$0$

$\%$

$>$

$2$

$0$

$\%$

$$

$1$

$=$

$$Negligible

$2$

$=$

$$Can easily recover

$3$

$=$

$$High profile loss

$4$

$=$

$$Will take several years to recover

$5$

$=$

$$Substantial threat to the survival of business

LIKELIHOOD

Likelihood of occurrence over

$1$

$2$

$-$

month planning cycle

Highly Unlikely Unlikely Likely Highly

Likely Certainty

$1$

$=$

$0$

$\%$

$-$

$2$

$0$

$\%$

$2$

$=$

$2$

$1$

$\%$

$-$

$4$

$0$

$\%$

$3$

$=$

$4$

$1$

$\%$

$-$

$6$

$0$

$\%$

$4$

$=$

$6$

$1$

$\%$

$-$

$8$

$0$

$\%$

$5$

$=$

$8$

$1$

$\%$

$-$

$1$

$0$

$0$

$\%$

$$

CONTROLS

Inadequate

$=$

$3$

$$ Medium

$=$

$2$

$$ Adequate

$=$

$1$

$$

Inherent risk Impact Likelihood Probability Control Rating Priority to manage Residual risk

$($

$1$

$-$

$6$

$)$

$$

$$Future disasters

$($

e

$.$

g

$.$

$,$

$$ongoing floods, global warming and drought

$)$

$$

$$

$$Energy crisis

$($

e

$.$

g

$.$

$,$

$$loadshedding

$)$

$.$

$$

$$

$$Increase in Cyber risks and cybercrimes.

$$

$$Inadequate handling of fraud and corruption.

$$

$$Poor maintenance and development of infrastructure.

$$

$$Slow pace of sustainability and investment projects.