Below are the risks that could happen to an organisation like salvation army.

Use a risk assessment matrix to assess the likelihood and impact of the above risk

Explain how you would respond to the risks

What IT risk management strategies could be applied

• Physical threats - resulting from physical access or damage to IT resources such as the servers. These could include theft, damage from fire or flood, or unauthorised access to confidential data by an employee or outsider.

The probability of the above threat occurring is low but the impact would be high

• Electronic threats - aiming to compromise your business information - eg a hacker could get access to your website, your IT system could become infected by a computer virus, or you could fall victim to a fraudulent email or website. These are often of a criminal nature.

The probability of the above threat occurring is high and the impact is medium

• Technical failures - such as software bugs, a computer crash or the complete failure of a computer component. A technical failure can be catastrophic if, for example, you cannot retrieve data on a failed hard drive and no backup copy is available.
• The probability is high but the impact is low as there are systems in place to prevent the impact
• Infrastructure failures - such as the loss of your internet connection can interrupt your business - eg you could miss an important purchase order.

The probability is low and the impact is low

• Human error - is a major threat - eg someone might accidentally delete important data, or fail to follow security procedures properly.

Probability is low and impact is low