Features
Residual risk belongs in the score, not a footnote
Most decisions record risk in a separate list that never changes the answer. The list grows with every meeting, and its length is mistaken for diligence. Useful risk analysis is narrower: it asks what is left after each option's mitigations, how bad that remainder could be, and whether it should move the ranking.
Residual, not inherent
Inherent risk is the exposure before any response; residual risk is what remains after the mitigations you will really put in place. Decisions should compare residual risk, and they should be honest about mitigations. A mitigation that exists only as a sentence in a plan, with no owner and no budget, leaves the risk where it was.
Why a heat map falls short
The familiar grid of likelihood against impact, colored from green to red, is quick to read and easy to misuse. In 2008 the decision scientist Louis Anthony Cox showed that such grids can rank risks in the wrong order, because coarse categories hide large differences. A rare loss that would end the business and a frequent one that costs a week can land in the same amber cell.
Expected loss, the probability times the cost, is a better start, but it is not the whole answer. Some losses are worth paying a premium to avoid because they cannot be survived, whatever their average.
What the room does with risk
The Gray Wolf hunts hidden weaknesses in each option: dependencies, concentration, costs that arrive late. The Red Teamer runs stress scenarios that could break the plan. Grandfather asks what cannot be undone and what the cheapest way back would cost, and Inspector checks whether a mitigation is real or only promised.
Risks are attached to the options they belong to, so they move scores rather than sitting in an appendix. The Verdict names the residual risk that remains for the leading option, and when that risk is high and the evidence thin, the Judge can return No Strong Winner Yet.
Accepting what remains
Choosing an option does not by itself accept every risk that comes with it. The Human Decision records which residual risks the decision maker accepts, and the Outcome can later show whether any of them came to pass.
A mitigation that barely pays
A company faces a 10 percent chance over the next year of losing a $400,000 contract, an expected loss of $40,000. A $25,000 mitigation would cut that chance to 4 percent, an expected loss of $16,000. The mitigation and the remaining risk together cost $41,000, a thousand dollars more than doing nothing, so on expected value alone the mitigation fails. Grandfather points out that losing the contract would breach a loan covenant, a loss far larger than the contract itself. The Verdict favors the mitigation, and states plainly that it rests on avoiding ruin rather than on the average.
Questions
- Does this replace our risk register?
- No. A register is the long list for the whole organization. A room weighs the handful of risks that bear on one choice and lets them change its answer.
- Can the room estimate probabilities?
- When public data supports a base rate, Scout can find it and the engine works the sums exactly. Where no such data exists, the claim stays unverified and the Verdict counts it among what remains uncertain.
- Is this a security assessment?
- No. It weighs risk inside a choice. Penetration tests, audits, and regulated risk assessments remain the work of qualified professionals.
Further reading
Bring Argumont a Decision worth challenging.
Start with a paid 60 day pilot on your own real Decisions.