Capabilities Inventory and Attributes - Risk Attributes for the Capabilities Inventory
Capabilities Inventory and Attributes
Chapter 26. Risk Attributes for the Capabilities Inventory
Executive Summary: Chapter Overview
IF4ITThe Bottom Line
Core Concepts
| Concept | Definition & Strategic Role |
|---|---|
| Assessed Risk | Summarizes the overall risk level for the capability. |
| Key Risk Factors | Explains the drivers behind the risk assessment. |
| Risk Trend | Shows whether the capability’s risk profile is improving, stable, or deteriorating. |
Quick Q&A
Question: How do risk attributes improve governance?
Read More Below
Risk attributes capture the known risk profile of each Capability — the likelihood and impact of capability failure or underperformance.
| Attribute Name | Maturity | Description and Notes |
|---|---|---|
| Assessed Risk | Crawl | Description — The practitioner’s overall assessment of the risk associated with this Capability. Benefit(s) — Surfaces high-risk capabilities for priority attention in governance reviews and investment decisions. Source — Manual Examples — Very High, High, Medium, Low, Very Low Notes — Valid values: Very High │ High │ Medium │ Low │ Very Low. Assessed annually. |
| Key Risk Factors [Multi-Value] | Walk | Description — The specific factors driving the Assessed Risk rating. Benefit(s) — Translates the overall risk rating into actionable intelligence for mitigation planning. Source — Manual Examples — Single vendor dependency; Key person dependency; Legacy technology with no vendor support; Regulatory change exposure Notes — Separate multiple risk factors with semicolons. |
| Risk Trend | Run | Description — The direction of travel of the risk profile of this Capability over the past review period. Benefit(s) — Enables early warning of deteriorating capability risk. Source — Manual Examples — Improving, Stable, Deteriorating |
How to cite this page
When referencing this page in academic work, internal standards, or external publications, include the page title, IF4IT as author and publisher (The International Foundation for Information Technology (IF4IT), LLC), the URL, and your access date.
Example (informal web citation):
The International Foundation for Information Technology (IF4IT), LLC. Risk Attributes for the Capabilities Inventory | Capabilities Inventory and Attributes. https://if4it.org/best-practices/capabilities-inventory-and-attributes/risk-attributes-for-the-capabilities-inventory/ (accessed 2026-07-20).
See About Us for content governance and site-wide citation guidance.
Copyright for The International Foundation for Information Technology (IF4IT), LLC: 2008 - Present
Legal Disclaimers