pidamrisk

Pidamrisk is a concept in risk assessment used to quantify and compare risks within organizations. It is described as a structured approach that combines multiple dimensions into a single risk score to support prioritization and decision making.

The method commonly evaluates four dimensions: probability (the likelihood of the event occurring), impact (the severity of consequences), detectability (the likelihood that the event would be detected before causing harm), and mitigation effectiveness (how well existing controls reduce risk). Scoring is typically on a 1–5 scale for each dimension, and a composite risk rating is produced by aggregating these scores, often with weights assigned to reflect context.

The workflow usually includes risk identification, scoring, aggregation into a risk register, and prioritization using a matrix or dashboard. Results inform allocation of resources and mitigation planning.

Pidamrisk is not a formal standard and is not widely adopted as an official framework. It appears mainly in training materials, case studies, and discussions of risk scoring methods as a practical, informal tool that can complement established standards such as ISO 31000 or NIST SP 800-30.

Applications span information technology, project management, supply chain, and operations risk. It is used to rank risks for treatment, monitor risk exposure over time, and communicate risk to stakeholders.

Limitations include subjectivity in scoring, dependence on the chosen scales and weights, and potential misinterpretation of the composite score. Proponents emphasize using Pidamrisk alongside qualitative assessments and other risk management methods.

Related topics include risk matrices, ISO 31000, NIST SP 800-30, and FAIR.