Risk Assessment At The United States Army

The Government Accountability Office has pointed out that the important practice of effective risk management is a challenge for the Congress and the administration. Risk management is a strategic process of helping policymakers to make decisions about assessing risk, and having limited allocating resources in taking actions under conditions of uncertainty (GAO, 2008). However, with the policymakers recognizing the risk management, it helps them to make informed decisions, while Congress and the administration have charged federal agencies to use a risk-based move to prioritize resource investments. In addition, the federal agencies often do not have enough comprehensive risk management strategies that merge well with the program, budget, and investment decisions (GAO, 2008). Between combing the approach of risk management, the process of decision-making is very difficult for any organization. In addition, it has been reported that the GAO says it is particularly difficult for the Department of Homeland Security (DHS) to be given its diverse set of responsibilities. Homeland Security is responsible though for all hazards in the homeland security risk from natural disasters, industrial, and terrorist attacks. Experts have provided the history of natural disasters with the extensive historical data used to assess risks (GAO, 2008).

Throughout the many different types of establishments that currently exist today, there are risk assessments methodologies which are used to estimate or determine risk. According to the Department of Homeland Security (DHS) Risk Lexicon (2010), risk assessment methodologies are defined as, “set of methods, principles, or rules used to identify and assess risk and to form priorities, develop courses of action, and inform decision-making” (p.25). Whether it is a risk assessment tailored for the government or private companies, the methods and principles are similar in a sense that they all aim at evaluating risk. Once risk can be determined, they can then decipher what types of strategies and decisions that should be used. Of the many risk assessments out there three distinct models who stood out were the Maritime Security Risk Analysis Model (MSRAM), The CARVER model, and lastly the Transportation Sector Security Risk Assessment (TSSRA). This paper will discuss the three risk assessment methodology’s origin, the intended audience, as well as some main elements and attributes. Afterward, the paper will conclude with my personal opinion to its strengths and weaknesses. But first, background on the selected risk analysis models in its designated order is needed starting with MSRAM.

There is strengths and weaknesses; threats and vulnerabilities of every organization’s security system. These issues tend to be those of the same at national and global levels; crime and criminology tend to have an impact on it.

Throughout all phases of risk management planning, the specific topic of discussion will be risk identification, awareness and communication. Risk Identification consists of determining which are likely to have an effect on the organization, and documenting the characteristics of each risk. Risk Awareness requires that all Defense Logistics Information employees and contractors be aware of what constitutes a risk and specific events or factors that could potentially impact the organization in a negative way. Risk communication involves bringing risk factors or events to the attention of the IT Manager.

The Department of Homeland Security (DHS) Risk Lexicon (2010) states that “risk is a key organizing principle for homeland security strategies, programs, efforts, and activities” (p. 1). This means that risk management is a decision making tool that allows for the DHS to intelligently and efficiently make planning choices based on threat level priorities. Some of the choices that are made using risk management are where to allocate both physical and financial resources, types of training initiatives for a specific threat, technological initiatives and strategic planning for risk mitigation and asset defense.

This paper will thoroughly define and explain planning and mitigation. Additionally, it will cover several factors that play a role in each category. Specifically, this paper will look into several phases of planning to include: continuity of operations; mission essential functions; planning development; and preparedness. Furthermore, it will look what types a factors should be looked at when making an organizations plans. In addition, this paper will look at mitigating risks, specifically cyber and physical risk mitigation and some of the different approaches risks can be mitigated. Finally, this paper will briefly look at the Department of Defense’s Operational Risk Management process and how it ties planning and mitigation together.

Risk management is beneficial for the Department of Homeland Defense (DHS). Not only for the DHS, but for just about any situation needing a further analysis. How can an individual understand risks if homework is not accomplished beforehand? Risk can be associated with just about any situation. The focus will be to better understand the benefits of a risk management program as applied to homeland security operations. Also, the perception, influence, and balancing of risk elements, and how it can be applied in determining the level of risk.

Risk refers to a likelihood, probability, a chance that a loss may occur in a given organization. Most of the times, there is a high risk when there is vulnerability. In this case, vulnerability refers to a weakness that the organization has. Risk assessment refers to the process of identification of potential hazards and proper analysis of the expected losses if those hazards occur (Homeland Security, n.d.). Risk assessment as a way of profiling risk according to impact to the organization. Some organizations have business impact analysis exercises geared towards determination of potential hazards based risk assessment approaches. Organizations’ risk differ depending on the size and the type of business they are doing. The disparity in organizations’ risk call for different adaptation of risk assessment approaches. Even with the disparities of the businesses, proper risk management not only ranks the risks according to the seriousness but also identifies the best methods to control risks in an organization.

The Department of Homeland Security Enterprise identifies an enormous value in risk management. This is because its core role is to investigate and hold up every single operation done by the particular department. The process assists in the prevention, protection, mitigation and response to, as well as recovery from the risks to the Nation. So as to identify the effectiveness of the risk management process, the DHS must collaborate with their allies within the enterprise. Another role of the department is to set up an incorporated risk management through the generation of safety, security, and resilience across the domains. This takes place through the collaborative efforts to put off violence and boost security, safety, and efficient management of the national

This paper discusses three risk analysis methodologies, specifically, MSRAM, OCTAVE, and CRAMM and provides a detailed description of each and how they incorporate risk into a platform for decision makers to use in their endeavors to prevent, protect, mitigate, respond, and in recovery measures as part of the risk assessment and management processes.

This sector is vulnerable to a variety of all-hazards threats, and is especially concerned about potentially catastrophic impacts resulting from biological, cyber, vehicle-borne explosive devices, and insider threats. The size,

Research shows that various risk management tools exist, ranging from the strict minimum to very comprehensive methodological (Harrison 1997). In different countries there are different methods applied in risk management, however the methodology is the same, systems characterization and description, threat and vulnerability identification, risk assessment and recommended

Service members in the military are faced with tough decisions on a daily basis. Despite the difficult situations, the majority of service members will opt to the right thing. However; there are several service members who will elect the easy path and end up choosing the wrong decision, even though they know the right thing to do. I agree with General. H. Norman Schwarzkopf that people know the right thing to do and that it is difficult to execute because of a person’s belief, risky behavior, and integrity.

231). It is important to analyze project risk to improve project performance. Therefore as part of this case research and recommendations, an exploration of PMI’s six-stage risk process as outlined in the PMBOK Guide (2008) will be conducted as it relates to risk management alternatives involved with the DIA development with a specific focus on its implementation of an automated area-wide baggage handling system. To evaluate the success of proposed solutions, each stage of the process is presented as an alternative analysis to establish a basic framework of how risk management is approached for this project and the suggested tools utilized to accomplish its overall structure as: (1) risk management planning; (2) risk identification; (3) risk qualification; (4) risk quantification; (5) risk response planning; and (6) risk monitoring and control. Finally detailed recommendations are specified and conclusions drawn that should be implemented with an evaluation process to measure the success of the case review based on the risk analysis presented.

It is critically important that all of us are in agreement why we are meeting and the expected outcomes. Finally, as part of the agenda review, we will review a proposed list of attendees. These personnel may include representation from the director of field operations, land based facility safety, off shore facility safety, finance, public relations, marketing, legal operations, audit department, human resources and finally key members of the project team. The workshop will be two days in duration at an offsite conference center so the group can focus on the development of the risks that are relevant to this project and its deliverables.