1. Scope 2. Exposure 3. Interventions 4. Effects 5. Results

1. Scope & risk tolerance

Define what this analysis covers and how you'll judge whether the loss is tolerable.

Used in navigation and the report header.

Full business, a business unit, a piece of software — whatever boundary makes sense.

A quantitative threshold you consider tolerable, in your reporting currency.

Used to annualise ongoing costs and cumulative benefit.