Disaster Risk Assessment

Produces a scored, prioritized risk register using a quantitative Probability × Impact matrix. Covers 7 disaster types across 3 themes (Environmental, Infrastructure Reliability, Security) with 18+ pre-seeded scenarios. Output drives response plan prioritization, incident response team scoping, and disaster recovery test selection.

When to Use

• Starting disaster planning for a new or existing system
• Preparing for a disaster recovery test or tabletop exercise
• Scoping an incident response team's charter and coverage
• Evaluating how a change in infrastructure (new datacenter, cloud migration) shifts risk exposure
• Conducting a per-site risk review for a multi-location organization
• Revisiting a prior assessment after a significant organizational or threat environment change

Prerequisite: Know your system's architecture and its key dependencies (networking, authentication, storage, third-party services). Risk ratings are only as good as the system inventory behind them.

Context & Input Gathering

Before scoring, establish three inputs: