|
|
This OCP module is designed to examine and evaluate the client's
existing operating environment and provide a fairly accurate
assessment of the levels of risk exposures associated with the
operating environment in terms of the people, the place and
the processes. The module seeks to measure the risks of the
undesired events striking, having impact, or resulting in consequences
and affects on the people, place and processes. The list of
potential risk areas can be quite extensive, if it is not, then
the process of identification and selection criteria may well
have been incorrect or wrong.
An undesired event occurring does not necessarily mean that
it will impede, impair, interrupt, or halt the client's business
operation. This is an important and decisive consideration in
OCP because money, time and effort can be unnecessarily expended
to counter the expected affects of an undesired event ( even
if it has a high likelihood of occurring ) unless determination
has been made that there will actually be bad and negative affects
on the people, place and processes aspects of the client's business
operation associated with the undesired event. In other words,
only undesired events that have significant impact, consequences
and affects on the client's business operation will need to
be considered and managed.
Besides seeking to identify, categorize and analyze all possible
risks faced by the client, the risk assessment module measures
the probability and likelihood of their occurrences. Impressions
about the quantifiable are no substitute for measurement. Too
many times, levels of risks are classified broadly instead of
being quantified. The process of quantification or measurement
enables an accurate evaluation of the level of risk and facilitates
the determination of both the costs of, and benefits from, reduction
in the levels of risk of any occurrence.
In conclusion, a good understanding of the risk exposures enables
the clients to stay focused and be cost effective in its operational
continuity planning effort. While risks cannot be totally eliminated,
the awareness of their presence can increase the level of vigilance.
|
|
|
|