u/majima1234

We have a methodology for information security risk management but none for operational risks management. I have less than a month to adapt our current methodology to also include operational risks. Is that feasible?

I have no idea how to start with operational risks management. I know that it should be done for processes and services but I have very limited knowledge of the company's processes and services. Information security has been a little easier bc we can use catalogues of threats and vulnerabilities from iso 27000 that we apply to assets. But I can't find anything similar for operational risks and I don't know what to do. Is it supposed to be scenario based analysis rather than asset based analyis, as it is done for information security risks?

Also I know the general steps of risk identification, analysis (impact probability and evaluation), treatment (transfer, reeducation, avoidance, acceptance) and monitoring. For me the biggest challenge is identification I suppose - actually coming up with the risks for the processes. Are there any resources that can help to formulate scenarios or something like that?

If anyone can give me some guidance, any help would be hugely appreciated. I am extremely stressed and struggling a lot.

Edit: thanks a lot for the suggestions. I will use them as much as I can. I have one more week to write the methodology. It seems management either wants trash or has no idea what's going on. I don't have a lot of experience but this sounds unreasonable to me.

My father bought me an apartment in which I live by myself, in another city from where my parents live. He wants me to give him the spare key. He said jokingly that he wants to come verify that things are clean. Idk if it's a joke or maybe he will actually do it. Usually he minds his own business so I think the likelihood that he will do it is low. Nevertheless I work full time and don't like the idea of him entering it whenever he would want. What can I do? I feel disrespected by this, but I mean he payed for the apartment and he's very dominating and disregards anyone else's opinion. I don't know if I can refuse.

I feel like having hope in something better can make it more difficult to deal with current conditions.

I've been struggling with a situation and it's been difficult, but I've been contempt with it and I've generally ignored it and minded my business. But recently I got a suggestion of what could make it better, and now it feels like the current state that I am in is more tiring, compared to how I felt before hearing this suggestion.

I am aware that you're supposed to work for the improved conditions, and I will do something in that regard. But in this case it's not something that I can control or influence. It's a matter of wishing it would be possible to make this change upon asking someone higher in the hierarchy.

Any thoughts on this? Did anyone have similar feelings? Am I mistaking the logic somehow and is there a better way to look at it?