#39 – REDEFINING THE BUSINESS IMPACT ASSESSMENT – GEARY SIKICH

UntitledREDEFINING THE BIA – USEFULNESS AND USES
If we agree on the basic premise that Business Continuity can be defined as sustaining what is critical to the enterprise’s survivability during periods of discontinuity; then we must recognize that the activity known as the Business Impact Assessment (Analysis) or BIA needs to be redefined.   The BIA, as currently practiced does not necessarily achieve the following:

  • Define what is critical to the organization.
  • Develop strategies to recover/sustain during times of discontinuity. Continue reading

#37 – RISK AND COMPLIANCE – GEARY SIKICH

Risk management is not compliance; however, compliance can serve as a basis for the management of risks.  A risk management program that overlooks compliance or underplays the significance of being in compliance puts the enterprise at risk.  That said, risks and the managing of risk is not directly related to compliance; rather risk management is related to ensuring that the organization’s strategy, goals and objectives are achieved by buffering risk from being realized. Continue reading

#36 – SOME THOUGHTS ON FMEA’S AND UNKNOWN RISKS – JAMES LAMPRECHT

Jim LamprechtAnyone who has conducted a search on ‘risk analysis’, ‘managing risk’, ‘risk management’ or any other permutation would have discovered that the subject of risk analysis has been around for a very long time and has been covered by numerous authors.  Still, the daunting challenge remains; how can one conduct process risk analysis without the help of a PhD in statistics?  Continue reading

#36 – REMOTE AUDITING -THE RISE OF THE CYBER AUDITOR – ROBERT GIBSON

It is hard to find an industry or profession that has not used the technological advancements of the last 10 years to improve its systems and services.  The risk of failure and falling behind competitors has driven many companies towards the rapid adoption of new tools in order to bring an innovative approach to their operations.  The products are innovative and so, in turn, are the processes of the organisations that use them to improve their performance. Continue reading