Abstract:

The article discusses the process of risk management introduced in 2015 as a result of inconsistent implementation of law no. 320/2001. The authors show the way to identify and analyze a risk, using identification and analysis of assets, followed by threats, thanks to their influence on the assets. They demonstrate the approach to defining risks with second and first level targets in the department of Ministry of Defence, while using risk shifting and aggregation of dependent risks. They describe the application of the risk management process outcomes during goal managers‘ decision-making in the process of medium-term and annual planning of the department of Ministry of Defence in relation to changes in these processes.