Conducting a risk assessment checklist

Who leads Whoever leads the meeting Name

Use it when

you're setting aside a team meeting to decide which risks to tackle first.

Talk it through

List what you do. The few activities the organisation couldn’t function without.
List who’s involved. Staff, volunteers, partners, the people you serve, donors, opponents.
List what you hold. Information and where it’s kept, accounts, devices, the website.
Name the threats. Has it happened to you or groups like yours? Could they, and would they?
Rank them. Low, medium or high, for how likely and how bad.
Decide, and write it down. What you’ll act on, who leads and when you’ll look again.

Store the notes somewhere secure, and wipe the whiteboard once it’s typed up.
Think about who can see into the room.
In high-risk settings, switch phones and laptops off while you talk.

Take care: Naming threats can stir up fear. Leave breathing room, and remind everyone that any risk can be reduced.

Started Done Review again