Risk Management
Risk Velocity & Persistence
How fast registered risks could crystallise and how long their impact would linger once realised.
Why timing changes how a risk should be managed
Two risks with identical impact scores can demand completely different responses depending on how quickly they strike and how long their effects endure. A fast, persistent risk leaves little reaction time and a long recovery, which is exactly the kind of exposure the audit committee and accounting officer must plan continuity around. AuditPro Core captures velocity and persistence so prioritisation reflects timing, not only severity.
The Numbers
AuditPro Core renders this view from your tenant's live, tamper-evident records. The figures below are illustrative sample data.
Fast-onset risks
29
impact <30 days
High persistence
18
recovery >12 mo
Slow & contained
97
Avg velocity score
3.1
of 5
Velocity profile by risk category
Velocity and persistence by category
| Category | Velocity | Persistence | Risks |
|---|---|---|---|
| Cyber | 4.6 | 3.8 | 22 |
| Fiscal | 2.1 | 4.4 | 31 |
| Service | 3 | 3.2 | 44 |
| Compliance | 2.4 | 2.6 | 38 |
| Reputation | 4.2 | 4.1 | 17 |
Figures shown are illustrative sample data for demonstration. AuditPro Core renders these views from your own tenant's live, tamper-evident records.
Velocity
Velocity is the speed at which a risk moves from possible to realised. High-velocity risks compress the window for detection and intervention, raising the premium on preventive controls.
Persistence
Persistence is how long the impact lingers once the event occurs. A risk that disrupts operations for months is materially worse than one resolved in days, even at equal impact.
Beyond the likelihood-impact grid
The standard heat map ignores time entirely. Adding velocity and persistence turns a static rating into a dynamic profile that better informs response strategy.
Response implications
Fast risks favour prevention and early-warning indicators; persistent risks favour resilience, redundancy and recovery planning. Timing dictates which lever to pull.
How AuditPro Core Bridges the Gap
- Time dimensions: each risk carries velocity and persistence ratings alongside likelihood and impact.
- Prioritisation logic: the platform surfaces fast, persistent risks that a severity-only view would underweight.
- Continuity linkage: high-persistence risks connect to business continuity and recovery plans for joined-up response.
- Audit-ready export: the enriched risk profile exports for committee packs with timing explicitly documented.
Key Takeaways
- Equal-impact risks can need opposite responses depending on timing.
- Fast risks reward prevention; persistent risks reward resilience and recovery.
- A likelihood-impact grid alone is blind to how quickly and how long risk bites.
- Link persistent risks directly to continuity planning.
See This on Your Own Data
AuditPro Core renders this dashboard from your tenant's live, tamper-evident records — every figure traceable to source.