Wednesday, September 5, 2012

Conduct risk assessment


A risk assessment by identifying, analyzing, and weighing of all potential risks, threats and risks to the environment inside and outside the business. It turns out if a facility (building) is vulnerable to weather-related events, HVAC failure internal / external security vulnerabilities and risks of local area. It allows companies to document mitigation actions have been taken to manage these exposures. By identifying the threats that are currently being mitigated verses threats that are not, a company may establish a list of recommendations for improvement.

To succeed, any risk assessment should focus on local issues identified related to the business. Before exploring other concerns, focus on the more realistic risks and threats that currently exist in the business world. This may include factors such as:

1) The nature of the business.

2) Around Facility.

3) The construction of the instrument.

4) common weather patterns.

5) Addiction Technology.

OBJECTIVES OF THE EVALUATION OF RISKS

During the assessment of risks, business risks are identified and evaluated. The vulnerability of business to these risks will be assessed. You can also:
1) Identify which prevention practices were used.
2) establish and implement measures to limit risks.
3) Terminate the overall risk to the business.
4) Building a case selection strategy.

Once the assessment has been completed, a company can make decisions regarding methods of mitigating risks. Completing a risk assessment and Business Impact Analysis, a company can implement the best strategies for contingency planning.

RISK ASSESSMENT PROCESS

Despite prevention practices used, the potential risks that are existing and may result in a loss to the company should be considered. Although the exact nature of these exposures and their consequences are difficult to determine, it is worthwhile to conduct a risk assessment of all threats that can logically happen.

What should be included?

All locations and facilities should be included in risk assessment. The surrounding businesses, fire, local police and community utilities should be included in the evaluation. Each vendor has provided a service that is provided to the company should be evaluated.

STEPS TO FOLLOW

The following steps are required to complete a risk assessment.

1) Identify / Threats of risk and vulnerability.

2) analyze the risks and determine vulnerability.

3) Identify options for mitigation and recovery.

4) Evaluate and select options.

There are additional steps that must take place during this process. Some of these actions are:
1) review the internal plans and policies.

2) Meeting with outside groups.

3) Identify activities.

4) Conduct a review of insurance.

Risk Assessment

The process of identifying risks and threats, probability of occurrence, the vulnerability of each risk / threat and the potential impact that could be caused, it is necessary to introduce preventative measures and create strategies for recovery. Identification of risks also provides a number of other advantages including:

1) exposes previously overlooked vulnerabilities that must be addressed by plans and procedures.

2) Locate where preventive measures are lacking or need reevaluated.

3) They can highlight the importance of emergency planning and management to get staff on board.

4) will help to document the interdependencies between services and increase communication between internal groups. It may also indicate the individual points of failure in critical services.

To ease this process, the risk categories should be created to focus the thinking process. Survey in the risk assessment, the main categories include natural hazards, risks of anthropogenic (human) and environmental risks. These requirements are certainly not, and should not be considered binding.

The nature of a risk / threat must be determined, regardless of type. The factors to be taken into account should include (but not limited to):

1) Location.

2) Models forecast for the area and surrounding areas.

3) the internal dangers (HVAC, security equipment, Access, etc.).

4) Distance from the local response / support units.

5) external hazards (near highways, plants, etc..)

Potential exposure can be classified as:

1) natural threats.

2) anthropogenic (human) threats.

3) environmental threats.

Other steps in conducting risk assessment are to review the following points:

1) Probability of occurrence.

2) vulnerability to risks.

3) Potential Impact.

4) The preventive measures in Place.

5) Insurance coverage.

6) past experiences.

Analysis of results

Once the investigation into the risk assessment and face to face interviews were conducted, the next step is to analyze and present the results so that management can get the most use of the data. The analysis can be time consuming and tedious, especially with a huge amount of data, but is critical for the RA process.

The analysis will be the basis for planning recommendations to top management. Recovery strategies to be developed should be based on the results of the Survey of risk assessment and interviews, as well as business impact analysis results.

FINAL REPORT AND PRESENTATION

Start your final report with an executive overview of the draft risk assessment. This explains the objectives of the project, which was in the field, and what approach was used. Then provide a summary of the potential risks.

CREATION OF EXECUTIVE REPORT

The results of the risk assessment will form the basis for the final report. The aim is to provide managers with enough information to make them comfortable in recommending strategies to support, actions, or budget to accept the level of risk by not implementing recovery strategies. The report should include graphs that show the results visually. Do not overuse graphics. Too many graphs and reports can make the examination of the information confusing. Provide graphs for general information on the departments, the financial impact, etc.

The final report should include:

1) Previous Disruption History.

2) risks and vulnerabilities.

3) preventive measures.

4) Presentation of the results.

5) Next Steps.

The process of risk assessment is an essential phase of Continuity Planning. The possibility of a disaster strikes a business is unpredictable. The company should implement a comprehensive program of business continuity planning and develop recovery plans that include all the critical operations and functions of the business....

No comments:

Post a Comment