What are the five most important things to consider when conducting a risk analysis?
By submitting your email address, you agree to receive emails regarding relevant topic offers from TechTarget and its partners. You can withdraw your consent at any time. Contact TechTarget at 275 Grove Street, Newton, MA.
1. Define the purpose and scope of the risk analysis. This step helps you determine what you'll be attempting to achieve with the RA.
2. Identify the business functions that may be at risk. This step further pinpoints the business issues (e.g., people, process, technology, facilities) for which you are conducting an RA.
3. Identify the most likely risks that could affect the business functions. This step identifies what risk/threat situations (both internal and external) are likely to affect the operation of the business functions in question.
4. Define the risk metrics that you want to analyze. This step identifies the risk metrics to be analyzed, e.g., statistical probability of a risk occurring, potential damage to the business function (or whatever is being analyzed) if the risk occurs, and (optionally) the financial impact if the risk occurs.
5. Determine how the results will be used (often in conjunction with BIA results). Once the RA outputs have been obtained, the final step is to determine how they will be used, e.g., to identify business functions that are at the highest risk of disruption.
Dig Deeper on Disaster Recovery Planning-Management
Related Q&A from Paul Kirvan
You should be able to justify the need for a BC/DR plan. But here's what you can do if you fail to get management buy-in and you still want disaster ...continue reading
While it's always safer for businesses to have properly funded DR plan testing, there are ways to assess your plan even when the data storage budget ...continue reading
For those organizations that believe 'It will never happen to me,' options to a formal business continuity/disaster recovery plan do exist if the ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.