Workshop: Mathematics or Intuition – Can We (Really) Assess Risk?

A half-day professional workshop will be held the day before the conference, September 10, 2025.
The workshop is intended for all professionals who rely on risk assessment in their work or conduct risk assessments themselves – whether they work in risk management, auditing, cybersecurity, controls, compliance, or business process management – with the aim of developing practical skills for analyzing risks and making decisions in complex and uncertain environments.
The workshop aims to help participants apply practical knowledge and skills in assessing various types of risks through realistic scenarios and collaborative group work. The focus is on understanding the assessment process, avoiding common mistakes, and balancing quantitative and qualitative approaches to risk analysis.
Workshop Description
The workshop unfolds in the following phases:
- Introductory Lecture. An overview of the key elements of the risk management process, assessment methods, impact and likelihood calculation, and psychological factors that can lead to inaccurate risk evaluations.
- Group Practical Exercise. Participants are divided into groups and are assigned the task of conducting an initial screening of an IT system in a fictional company, Click & Buy; Based on the provided documentation, they must identify key risks and assess their levels.
- Presentation of the Assessed Risks. Each group presents its findings, explains the rationale behind the assigned risk levels, and discusses the decision-making process.
- Closing Lecture and Discussion. Recap of the workshop, group comparison, guidance on prioritizing risks with similar levels but different impact/probability, and a review of typical assessment errors.
All participants will receive 4 CPE (Continuing Professional Education) credits. Detailed workshop agenda is provided below.