The document contains a risk assessment with two parts. Part A lists 5 risk areas with expected frequency, impact, severity and overall risk level. Part B notes one risk area changed from the action plans. Part C explains part 1 used severity levels while part 2 categorized risks as low, medium, and high.

1. PA 2

2. No Risk Expectation Impact Severity Risk Area 1 No client 4 10 40 Medium Risk 2 Certification fail 2 10 20 Medium Risk 3 No consultant 2 10 20 Medium Risk 4 Less competent 2 8 16 Medium Risk 5 Late payment 4 6 24 Medium Risk

3. No Risk Expectation Impact Severity Risk Area 1 No client 2 10 20 Medium Risk 2 Certification fail 1 10 10 Medium Risk 3 No consultant 1 10 10 Medium Risk 4 Less competent 1 8 8 Medium Risk 5 Late payment 3 6 18 Medium Risk

4. PART B B1. Item ‘No client’ move from (4,10) to (2,10) because the action plans are effectively implemented. B2. Yes, my attitude are affected, because from the movement of risk items we know how to face the risks and we will continue the action plans. PART C PA1 - risk evaluation using level number of severity. PA2 - risk evaluation using low, medium and high risk.