Individual Risk Map

risk

Individual Risk Map

Definition

An individual risk map is a structured, personalized assessment that translates aggregate risk statistics into a representation of the specific risks faced or posed by a particular subject. The map integrates baseline risk (population-level prevalence), contextual modifiers (geography, role, environment), individual factors (history, comorbidities, behavior, vulnerability), and temporal dynamics (changes over time) into a decision-ready artifact. The output may be a quantitative score, a qualitative narrative, a structured matrix, or a graph — but its defining feature is individualization: it answers the question "what is the risk for this person?" rather than "what is the average risk for people like this?"

Manažerské shrnutí

Individual risk map (mapa individuálních rizik) je strukturovaný personalizovaný posudek, který převádí agregované rizikové statistiky na obraz rizik konkrétního subjektu. Integruje populační baseline, kontextové modifikátory (lokalita, role, prostředí), individuální faktory (anamnéza, komorbidity, chování, zranitelnost) a časovou dynamiku. V Prismatic Platform je IRM relevantní pro DD posouzení klíčových osob (zakladatel, CEO, beneficial owner — risk klíčové osoby pro investora), pro výzkumný kontext (riziko/přínos individualizovaný pro konkrétního participanta při získávání informovaného souhlasu), pro AML/KYC (PEP risk profile), a pro ochranné operace (threat assessment chráněné osoby). Klíčový požadavek: IRM musí být aktualizován při každé materiální změně okolností.

Individual risk mapping intersects multiple regulated domains. In clinical research, IRBs increasingly demand individualized risk-benefit analyses rather than population-level summaries, particularly for vulnerable participants and for transformative interventions. In AML/CFT compliance, the Wolfsberg Group and FATF guidance require risk-based customer due diligence that distinguishes Politically Exposed Persons by individualized risk factors (jurisdiction, function, source of wealth) rather than blanket categorical treatment. In M&A due diligence, key-person risk assessment evaluates the specific founder, CEO, or technical lead whose departure would materially impair value, integrating personal, financial, legal, and reputational vectors. In protection operations, individualized threat assessment is mandatory for executives, public figures, and witnesses. Czech and EU GDPR Article 35 (Data Protection Impact Assessment) operationalizes a related principle for personal-data processing.

Practical Application

A robust individual risk map proceeds in four phases. Baseline establishment draws on validated population-level data (epidemiological registries, financial-crime typologies, threat-intelligence feeds). Individualization adjusts the baseline using the subject's documented history, behavioral indicators, and contextual factors. Validation tests the assessment against known outcomes (where ground truth exists) or against expert consensus. Communication presents the map in a form the decision-maker can act on — neither over-precise (false certainty) nor over-vague (no decision support). The map should be re-evaluated on a defined schedule (annually for low-risk subjects, more frequently for higher-risk or rapidly evolving cases) and immediately after material events (divorce, indictment, role change, jurisdiction change).

References

  • Hayes, A.F. The Standard for Risk Assessment (Routledge, 2020)
  • FATF. Guidance for a Risk-Based Approach (Financial Action Task Force, 2014, updated)
  • Wolfsberg Group. Wolfsberg Statement on Source of Wealth and Source of Funds (2020)
  • Regulation (EU) 2016/679 (GDPR), Article 35 (Data Protection Impact Assessment)

Built with precision. Optimized for AI consumption.

Back to Glossary