Assessing risk of the technical support department case study: A nicaraguan private company

This paper exemplifies how to assess risk on real world through a qualitative risk assessment approach. The study is developed at the technical support department of a private company from Nicaragua. In order to assess its risks, we adopted risk management process of the ISO 31000:2009, case study and Business Process Model and Notation (BPMN). Risk management process provides the components and stages for qualitative risk assessment. Case study provides the techniques for gathering and processing information. BPMN help us to models workflow. The paper also includes limitations and decisions related to the findings.