USMBOK™: USM150
Customer Risk Management
A ‘risk’ is the likelihood of an undesirable scenario or event occurring that might have an impact upon an asset and the objectives being achieved through use of that asset.
Risk is defined by two characteristics: 'probability' or 'likelihood' (L) of occurrence and the 'consequence' (C) of it ocurring.
This is expressed as R = L x C. Risk Management provides a systematic methodology for identifying, assessing and managing risks through the implementation of countermeasures.
Charter Statement:
-
To identify, assess the probability of risk to customers associated with service usage, and reduce to an acceptable and affordable level the consequential impact of specific undesired events.
Customer Risk Management Quick Links
Best PracticesKey Performance Measures
Key Objectives
|
The following key objectives are just some of those commonly found within this topic's standard operating practices:
A more complete list of objectives may be referenced in the Guide to the USMBOK and supporting reference materials.
|
Key Concepts
The following key concepts are just some of those commonly found within this topic's standard operating practices:
- Asset
- Threat
- Threat agent
- Probability
- Vulnerability
- Exposure
- Safeguard or countermeasure
- 4Ts or risk management, Tolerate, Treat, Terminate, Transfer
- Continuous risk management
A more complete list of concepts may be referenced in the Guide to the USMBOK and supporting reference materials.
Key Artifacts
The following key artifacts are just some of those commonly found within this topic's standard operating practices:
- Risk management methodology
- Risk statement template
- Risk assessment reports
- Customer risk plan
A more complete list of artifacts may be referenced in the Guide to the USMBOK and supporting reference materials.
Major Activities
The following major activities are representative of those commonly found within this topics's standard operating practices:
- Identify
- Analyze
- Plan
- Track
- Control
- Communicate and Document
A more complete list of major activities may be referenced in the Guide to the USMBOK and supporting reference materials.
More...
The USMBOK provides a significant amount of additional information on each element of the framework, including this area. The additional information includes:
Best Practices :
Best practices represents a technique or method that through experience and research has reliably led to a desirable level of operation. The USMBOK provides specific guidance on the 'best practices' required to design, implement and sustain an efficient and effective operation and offer these through a subscription based service, the
Best Practice Statement Library.
Key Performance Measures :
The efficiency and effectiveness of an operation is measured through its 'performance'. The Performance Management Framework (PMF) provides three levels or types of measures to help manage performance from the strategic, tactical and operational perspective.
The USMBOK provides specific guidance on these 'key performance measures' through a dedicated, subscription based service, the
Key Performance Measure Library.
Extensions:
An 'extension' is an approved additional relevant reference to the USMBOK and typically in the form of :
- A book or publication with an ISBN or similar reference;
- A website page or pages;
- A white paper;
- A personally penned article or report;
- A periodical article or newsletter item;
More information on the available extensions and how they may be accessed or contributions submitted can be found here:

