Abstract: A system for managing risk includes a user interface enabling selection of a particular affected entity from a plurality of predetermined types of affected entities, in response to a user command. A repository includes information associating the selected affected entity with a particular hazard potentially adversely affecting the selected affected entity. The information in the repository associates the particular hazard with: a severity of the particular hazard; a cause of the particular hazard; and a probability of occurrence of the cause. A risk processor uses information from the repository to provide an indication of risk of the particular hazard to the affected entity.