Criticality

Descriptor

Effective

5

The control is absolutely critical to the management and reduction of the risk. If this control is ineffective or partially effective, the likelihood and/or consequence of the risk will increase significantly (i.e. increases likelihood or consequnece by 3 or more levels)

Almost Certain

Severe

Extreme

Yes

Mostly Effective

4

The control is very important to the management and reduction of the risk. If this control is ineffective or partially effective, the likelihood and/or consequence of the risk will increase  (i.e. increases likelihood or consequnece by 2 levels)

Likely

Major

High

No

Partially Effective

3

The control is important to the management and reduction of the risk. If this control is ineffective or partially effective, the likelihood and/or consequence of the risk will increase  (i.e. increases likelihood or consequnece by 1 level)

Possible

Moderate

Medium

Not effective/non-existent

2

The control has some impact on the management and reduction of the risk.  Depending on the criticality of the other controls, an analysis should be undertaken to determine the necessity of this control.

Unlikely

Minor

Low

1

The control has little to no impact on the management and reduction of the risk.  It is unlikely this control is required.

Rare

Insignificant