Hi All,
I completed the Inherent Assessment, Control Assessment and Residual Assessment in an Risk Assessment.
After completing the Assessment, Inherent risk is '9', Control effectiveness is '2' and Residual risk is "2". As you can see in below picture:
But the Inherent ALE and Residual ALE of risk is Zero, please suggest how this calculated is done and how they are linked.
Thanks in Advance
The Risk Assessment Methodology (RAM) you're using there (LOB Risk Control Self Assessment) uses entirely qualitative measurement scales so won't be touching the quantitative fields such as those for ALE etc.
If you drill into the RAM itself you'll see calculation methods, e.g., weighted average from your answers for inherent impact:
