Skip to main content

1. Contextual Information

Before addressing a specific risk, it is essential to establish a clear understanding of its context.

The Contextual Information section serves as the foundation for a robust risk assessment by defining the boundaries, objectives, and expectations associated with the demand. This step ensures that all stakeholders share a common understanding of the current environment, the desired outcomes, and the limits of the assessment.


In this section, you will document the below information :

Context​

The overall context and purpose of the demand.

As-Is Situation​

The current state, including existing conditions, risks, and challenges.

To-Be Situation​

The desired future state after implementing remediation or controls.

In Scope​

Specific elements, systems, or processes included in the assessment.

Out of Scope​

Areas explicitly excluded from the assessment to avoid scope creep.


By carefully defining the "Context", As-Is Situation, the To-Be Situation, and the Scope, organisations can align their risk management efforts with their strategic goals and operational realities. This clarity minimises ambiguities, reduces misaligned expectations, and enhances the effectiveness of subsequent risk assessment and mitigation activities.

Clear and precise documentation in this section forms the cornerstone of an effective risk assessment process, enabling informed decision-making and targeted risk management strategies.