Risk assessment (business)

Business risk assessment identifies relevant risks, analyses their nature and significance and evaluates them against appropriate criteria. Likelihood and impact are often important, but timing, speed, uncertainty, dependencies and the effectiveness of existing controls can also matter. The assessment informs priorities and responses and is reviewed as conditions change. It differs from an auditor’s specific assessment of risks of material misstatement.