A risk portfolio is a totality of the organization’s risks. It contains structured information about risks and their characteristics, information on an evaluation, owners and status, descriptions of management actions and other necessary information.
Typical characteristics of risks are:
- An identifier that identifies the risk
- The name of the risk
- A risk category such as operational, financial or strategic
- The owner of the risk
- Position in the risk hierarchy
- Status, for example, proposal, pending approval, approved
Information related to a risk assessment is
In practice, a risk portfolio is handled with some software. In the third part of the course, we discuss alternative implementation methods and the implementation of risk portfolios.