Business Oriented risk assessment methodology iag

Business Oriented Risk Assessment & Management Methodology BRIAN KEITH SEITZINTELLECTUAL ARBITRAGE GROUP

Approach

Address elements of risk: Likelihood of Failure Consequence of Failure

To aid in prioritizing mitigation and avoidance strategies.

Brian Keith SeitzIntellectual Arbitrage Group.

Risk Elements

Likelihood of Failure Complexity Probability

Consequence of Failure Catastrophic (Human loss or injury) Critical (degrades business system beyond acceptable

limits, create shut-down or significant business loss ) Major (degrades business system beyond acceptable

limits, create business loss) Minor (doe not degrade business system beyond

acceptable limits)


Determine Criticality


When does a process failure become critical ?

• Time to critical effect to business• Time to repair and recover

What are the core Business processes ?• What must keep operating and when ?

Identify technology failure’s organizational effect


• Map Technology to processes• Determine technology path fitness• Determine technology network risk

Risk Assessment Methodology


Effect

Priority

Identify Business Processes

DetermineCritical Processes

IdentifySupporting Technology

DetermineTechnology’

Organizational Impact

Characterize Business Processes