Risk identification and analysis using a group support system (GSS)

The paper describes the use of a specific group support system (GroupSystems) for risk identification and analysis, sometimes called Control Risk Self Assessment (CRSA). The process can be applied to an entire organization, a department or a project. In this process, the key people involved enter the risks into networked laptop computers. The risks are discussed and the definitions refined. Participants then vote upon these risks by two criteria simultaneously, to assess both the likelihood of the risks and their potential impact. The display of the vote results shows the participants´ combined perception of the risks. The paper summarizes the historical development of risk management techniques (these techniques are already established in a conventional ´flip chart´ style meeting), and shows the benefits of a GSS approach. It then outlines the GSS process, including techniques to ensure clear risk definition, categorization and possible different voting scales. The advantages of this approach are described, including the self-documentation capabilities. User experiences and lessons learned are described. This process shows a high degree of customer satisfaction and has been used in hundreds of workshops around the world. The process naturally extends to the use of distributed meetings in situations where it is not practical for all participants to meet face-to face.