When considering which risk assessment technique would work best for your agency, consider the following:

· …Your Agency, your risk.

o The final outcome of the risk assessment should be pertinent to your agency, your agency’s function, activity, or process.

· Many better than fewer.

o Focus on a wide array of techniques instead of a small sampling. A wider array will give you better insight to the risks your agency faces as different techniques foster different outcomes.

· Check the personalities at the door.

o Open and honest discussion should be promoted whichever technique is used. Subordinates should feel comfortable disclosing a potential weakness in Internal Controls with Managers without the threat of retribution.

· Go Team!

o Assemble an Internal Control team when beginning to evaluate the risks your agency faces. The team should consist of members ranging from all aspects of the organization. Diversity and cross-functional are key words in describing team membership. In small agencies, the team may be 3 or 4 (or fewer) members; larger agencies may have 6-10 (or more) members, depending on the needs of the agency.

· Victory!!!

o A successful evaluation will produce a lengthy list of risks. The key objective for the team is to sift through the risks, determine the difference between a legitimate risk and a mere complaint, and to focus on the “ vital few” instead of the “trivial many.”