Description
Facilitated Risk Analysis Process (FRAP) is a discplined approach using brainstorming techniques. FRAP is more rigorous and structured than brainstorming per se.
Facilitated Risk Analysis Process
(brainstorming)
Facilitated Risk Analysis Process (FRAP) is a discplined approach using brainstorming
techniques. FRAP is more rigorous and structured than brainstorming per se. However,
both approachs are comboned here for brevity sake.
Both approachs begin with a free flowing “brainstorming session” conducted with subject
matter expert that are familiar with potential threats to the project. In this sense, the “project
is king”. In a purust sense, a governance law or regulation could be considered a “threat” to
the project. It may be very prudent for an IA practitioner to understand this and not rely on
any intrinsic “power” he/she may percieve to have, rather the IA practitioner may be more
beneficial in interpeting significant policies or laws to the group.
These brainstorming sessions should be structured with appropriate boundaries (e.g. time
limitations, full team participation, etc.) to prevent discussions from “getting out of control”.
The objective is to first identify all the threats that may impact the project.
“…The team does not usually attempt to obtain or develop specific numbers for the threat
likelihood … unless the data for determining such factors is readily available…
Such estimates take an inordinate amount of time and effort to identify and verify or
develop.
The risk documentation becomes too voluminous to be of practical use.
Specific loss estimates are generally not needed to determine if a control is needed….”
(PELTIER, 2001)
In the FRAP method, following the brainstorming session the identified risks or threats are
prioritized or categorized. These risks may be rated as most severe impact to least, etc.
After determining the priority of risks, the team suggests appropriate counter-measures to
control or mitigate these threats (risks). Risk Management Integration 30
doc_727852805.docx
Facilitated Risk Analysis Process (FRAP) is a discplined approach using brainstorming techniques. FRAP is more rigorous and structured than brainstorming per se.
Facilitated Risk Analysis Process
(brainstorming)
Facilitated Risk Analysis Process (FRAP) is a discplined approach using brainstorming
techniques. FRAP is more rigorous and structured than brainstorming per se. However,
both approachs are comboned here for brevity sake.
Both approachs begin with a free flowing “brainstorming session” conducted with subject
matter expert that are familiar with potential threats to the project. In this sense, the “project
is king”. In a purust sense, a governance law or regulation could be considered a “threat” to
the project. It may be very prudent for an IA practitioner to understand this and not rely on
any intrinsic “power” he/she may percieve to have, rather the IA practitioner may be more
beneficial in interpeting significant policies or laws to the group.
These brainstorming sessions should be structured with appropriate boundaries (e.g. time
limitations, full team participation, etc.) to prevent discussions from “getting out of control”.
The objective is to first identify all the threats that may impact the project.
“…The team does not usually attempt to obtain or develop specific numbers for the threat
likelihood … unless the data for determining such factors is readily available…
Such estimates take an inordinate amount of time and effort to identify and verify or
develop.
The risk documentation becomes too voluminous to be of practical use.
Specific loss estimates are generally not needed to determine if a control is needed….”
(PELTIER, 2001)
In the FRAP method, following the brainstorming session the identified risks or threats are
prioritized or categorized. These risks may be rated as most severe impact to least, etc.
After determining the priority of risks, the team suggests appropriate counter-measures to
control or mitigate these threats (risks). Risk Management Integration 30
doc_727852805.docx