Assess the Risks
To identify risk you must look at the vulnerable areas of your business, as well as considering some of the more generic "what if" scenarios, eg what if the power failed; what if a virus wiped out your IT system. Look for single points of failure in your technology or processes.
The essential part of Risk Assessment is that you ask three simple questions for each risk that you identify:-
- How likely is it to happen?
- What impact will it have on your business?
- What factors can reduce the likelihood or effect or mitigate the risk entirely.
Always try to consider the worst case scenario when carrying out your risk assessment. This will mean that less serious incidents will be easier to manage.
Changing the ethos
It is essential to have the active support of the senior team in your organisation. It is possible that during your planning you will have the opportunity to convince your staff of the importance of Business Continuity Management and promote the concept internally and externally.
With this approach Business Continuity becomes the normal process of day to day activity.
Business Continuity must be included in the preparation of new contracts, partnerships and business processes.
It is every manager's responsibility to ensure Business Continuity is an integral part of their normal business activity.
You cannot do this alone!
|.
|.
