A Practical Risk Analysis Approach: Managing BCM Risk

摘要

All business operations from commercial organizations and financial institutions to governmental departments will experience a variety of risks during the day to day operations. These risks may not be able to be avoided but should at least be controlled to some degree in a practical and cost effective manner dependent on the value of the information to the company. Practical risk analysis methods should be able to be applied to both information security management and business continuity management (BCM). For the purposes of this article I will concentrate on a practical risk analysis approach as part of the development of a structured BCM programme.