Risicoevent

Risicoevent is a term used in risk management to describe a potential occurrence that can affect the achievement of objectives. It can be negative, as a threat, or positive, as an opportunity. Each risicoevent has a probability of happening and an estimated impact on goals, resources, or timelines. It is identified during risk assessment and serves as a core input for prioritization and planning of responses.

Characteristics of a risicoevent include uncertainty, time of occurrence, sources, triggers, and interdependencies with other events. Risk events are typically documented in a risk register, with information such as description, likelihood, impact, triggers, owner, and existing controls. They can be analyzed qualitatively or quantitatively to determine overall risk level and priority.

In practice, the management of risicoevents follows a cycle of identification, assessment, prioritization, and response planning. For threats, response strategies may include avoidance, reduction, transfer, or acceptance. For opportunities, strategies may include exploitation, enhancement, sharing, or acceptance. Implemented controls are monitored, and residual risk is tracked through triggers and periodic reviews.

Examples of risicoevents include a cyberattack causing downtime, a supplier insolvency affecting delivery, or a new regulation increasing costs. Conversely, an opportunities-based event could be accelerated development or favorable market changes. The concept is used to inform decision making, contingency planning, and resource allocation.

Relation to frameworks: ISO 31000, COSO, and other standards treat risicoevents as essential elements of risk management. They are commonly represented in risk matrices and risk registers, where probability and impact are used to quantify risk and guide actions. The term is widely used in Dutch-language risk management literature.