RISK ASSESSMENT AND VULNERABILITY ANALYSIS
County Department: _________________________________
Please identify what hazard or situation would cause your department to activate your Continuity of Operations (COOP) P
Do you know how vulnerable your dept. is to natural, technological, and human-caused hazards? Below are some example
SEVERITY = (MAGNITUDE - MITIGATION)
PROBABILITY
HUMAN
IMPACT
PROPERTY
IMPACT
BUSINESS
IMPACT
PREPAREDNESS
INTERNAL
RESPONSE
Likelihood this will
occur
Possibility of
death or injury
Physical losses &
damages
Interruption of
services
Preplanning
Time,
Effectiveness,
resources
Likely
Limited
Critical
Catastrophic
Consider
Mitigate
Possible
Catastrophic
Catastrophic
Catastrophic
Mitigate
Mitigate
Wild Fire
Tornado
Highly Likely
Catastrophic
Catastrophic
Catastrophic
Likely
Limited
Critical
Catastrophic
Mitigate
Mitigate
Explosion
Vandalism
Terrorism
Loss of Key Staff
Medical Emergency
Sabotage
Riot/Civil Disorder
Radioactive Contamination
Epidemic
DISASTER INCIDENT
NATURAL
Flooding
Waterleak
Structural Fire
Hurricane
Thunder Storm
HUMAN-CAUSED
Updated: February 2011
Page 1 of 8
SEVERITY = (MAGNITUDE - MITIGATION)
PROBABILITY
HUMAN
IMPACT
PROPERTY
IMPACT
BUSINESS
IMPACT
PREPAREDNESS
INTERNAL
RESPONSE
Likelihood this will
occur
Possibility of
death or injury
Physical losses &
damages
Interruption of
services
Preplanning
Time,
Effectiveness,
resources
Toxic Contamination
Labor Dispute
Strike
Proximity to Airport
Proximity to Railroad
Proximity to Highway
Proximity to Turkey Point
Hardware Failure
Software Failure
HVAC Failure
Power Outage
Utility Disruption
*Threat increases with percentage.
DISASTER INCIDENT
TECHNICAL
PROBABILITY * SEVERI
PROBABILITY RATINGS:
EXPOSURE
3 = Highly Likely
2 = Likely
1 = Possible
0 = Negligible
Updated: February 2011
FREQUENCY
The potential for impact is very probable (near 100 percent) in the next year.
The potential for impact is between 10 and 100 percent within the next year.
OR
There is at least one chance of occurrence within the next 10 years.
The potential for impact is between 1 and 10 percent within the next year.
OR
There is at least one chance of occurrence within the next 100 years.
The potential for impact is less than 1 percent within the next 100 years.
Page 2 of 8
SEVERITY = (MAGNITUDE - MITIGATION)
PROBABILITY
HUMAN
IMPACT
PROPERTY
IMPACT
BUSINESS
IMPACT
PREPAREDNESS
INTERNAL
RESPONSE
Likelihood this will
occur
Possibility of
death or injury
Physical losses &
damages
Interruption of
services
Preplanning
Time,
Effectiveness,
resources
DISASTER INCIDENT
SEVERITY (MAGNITUDE) RATINGS:
MAGNITUDE
DEFINITION
* Multiple deaths.
* Complete interruption of operations from the primary facility for 30 days or more.
* Extensive damage to primary facility and/or surrounding infrastructure.
* Injuries and/or illnesses result in permanent disability.
* Complete interruption of operations from the primary facility for at least 2 weeks.
* Severe damage to primary facility and/or surrounding infrastructure.
* Injuries and/or illnesses do not result in permanent disability.
* Complete interruption of operations from the primary facility for more than 1 week.
* Minimal damage to primary facility and/or surrounding infrastructure.
* Injuries and/or illnesses are treatable with first aid.
* Shutdown of primary facility or surrounding infrastructure for 24 hours or less.
3= Catastrophic
2 = Critical
1 = Limited
0 = Negligible
SEVERITY (MITIGATION) RATINGS:
MITIGATION
DEFINITION
1= Mitigate
Mitigate means that mitigation strategies should be developed to reduce risk for that target/scenario combination. A
security plan should contain the scenario evaluated, the results of the evaluation and the mitigation measures.
2 = Consider
Consider means that the target/scenario combination should be considered and mitigation strategies should be
developed on a case-by-case basis. The Plan should contain the scenario evaluated, the results of the evaluation, a
the reason mitigation measures were or were not chosen.
3 = Document
Updated: February 2011
Document means that the target/scenario combination does not need mitigation measure at this time and therefore
needs only to be documented. The Plan should contain the scenario evaluated and the results of the evaluation. Th
will be beneficial in further revisions of the Plan, in order to know if the underlying assumptions have
changed
since
Page
3 of 8
the last edition of the Plan's assessment.
SEVERITY = (MAGNITUDE - MITIGATION)
PROBABILITY
HUMAN
IMPACT
PROPERTY
IMPACT
BUSINESS
IMPACT
PREPAREDNESS
INTERNAL
RESPONSE
Likelihood this will
occur
Possibility of
death or injury
Physical losses &
damages
Interruption of
services
Preplanning
Time,
Effectiveness,
resources
DISASTER INCIDENT
3 = Document
Updated: February 2011
Document means that the target/scenario combination does not need mitigation measure at this time and therefore
needs only to be documented. The Plan should contain the scenario evaluated and the results of the evaluation. Th
will be beneficial in further revisions of the Plan, in order to know if the underlying assumptions have changed since
the last edition of the Plan's assessment.
Page 4 of 8
erations (COOP) Plan?
are some examples
EXTERNAL
RESPONSE
RISK
Mutual Aid staff &
supplies
Relative
threat*
examples:
Consider
Mitigate
27
3*(9-0)=27
Mitigate
2*(6-3)=6
Updated: February 2011
2*(6-5)=2
1*(9-3)=6
Page 5 of 8
EXTERNAL
RESPONSE
RISK
Mutual Aid staff &
supplies
Relative
threat*
0
ABILITY * SEVERITY = RISK High = 27
Med = 14
Low = 0
-
xt year.
xt year.
rs.
year.
ars.
ears.
Updated: February 2011
Page 6 of 8
EXTERNAL
RESPONSE
RISK
Mutual Aid staff &
supplies
Relative
threat*
et/scenario combination. A
mitigation measures.
n strategies should be
esults of the evaluation, and
at this time and therefore
sults of the evaluation. This
ons haveUpdated:
changed since
February 2011
Page 7 of 8
EXTERNAL
RESPONSE
RISK
Mutual Aid staff &
supplies
Relative
threat*
Updated: February 2011
Page 8 of 8
