Lion Cipher Lab
10-minute drill: rate five risks and pick what to treat first
- GRC / Compliance
- Beginner
- ~10 min
- Free · no account required
Why it matters
Every organisation has more risks than money or time to treat them. A GRC (governance, risk and compliance) analyst earns trust by turning a messy list into a ranked one, and by recommending a response for each risk that a manager can sign off. Interviewers for GRC roles almost always hand over a short register and ask what you would do first; this drill is that exercise.
What you'll learn
- likelihood x impact scoring
- ranking a small risk register
- choosing a risk response (mitigate, transfer, avoid, accept)
- explaining a risk decision to a manager
Steps in this lab
- The artifact: a five-row risk register
- Score and rank
- Pick a response for each
- How to say it out loud