Question

A risk analyst is reviewing a risk register that lists several separate entries: a data center power failure, a single ISP link outage, and a HVAC cooling system failure — each individually rated 'low' likelihood and 'moderate' impact. The analyst notes all three depend on the same aging on-premises facility and could plausibly occur together during a heat wave. What should the analyst do to most accurately represent the risk to management?

Accepted Answer

Develop an aggregated scenario that models the combined impact of correlated events affecting the shared facility, then present the elevated exposure alongside the individual entries

Answer

Average the three individual ratings to produce a single consolidated facility risk score for reporting

Answer

Leave the entries as separate 'low/moderate' items since each was independently assessed using the approved scoring scale

Answer

Raise each individual entry's likelihood to 'high' to compensate for the shared dependency