ExpertTech realizes that although many companies utilize IT consultants from time to time, no two companies have the same needs. Our Process Management Solutions are centered around in-depth analysis of the customer and their existing processes. Our management team then develops a strategy based upon the information gathered from these analysis sessions, and customizes the solutions accordingly. We believe in this model - no more will you have to "take it or leave it" - now you can take what you want, and leave what you don't want!
Business Impact Analysis (BIA) and Risk Assessment (RA)
A cost-effective business continuity plan must be based on a sound analysis of the business processes and the risks those processes face. If you fail to identify a risk or process, you can neither manage the risk nor plan for its consequences.
Together, the Business Impact Analysis and Risk Assessment processes form the foundation from which successful and cost-effective business continuity plans are laid. What is the most cost-effective recovery strategy? How much is it worth spending to prevent this risk? If a disaster happens, where should I deploy my limited resources? It is the answers to such questions that a Business Impact Analysis and Risk Assessment provide.
We help develop a Business Impact Analysis and Risk Assessment for our clients. In a typical assignment we help you with the following tasks.
Business Impact Analysis
A BIA determines the processes to be recovered quickly following a disruption. It identifies the costs and consequences of a disruption, the dependencies between processes and the minimum service level that is required during the recovery period for each process. With this information the order in which processes should be restored and the resources required during restoration can be properly determined.
In a typical assignment, the stages include:
• Agree Terms of Reference and Scope of Work.
• Identify key staff to be interviewed or surveyed to determine key business processes.
• Survey or interview staff to determine information about the business processes.
• Determine the impacts from the disruption of the process which may damage the organization's reputation, its assets, or its financial position.
• Determine the Recovery Time Objective (RTO) for each process — the time by which the process must be recovered to its minimum service level.
• Determine the Recovery Point Objective (RPO) — the point to which information must be restored for business objectives to be met — for each process.
• Determine the Minimum Service Level (MSL) to which a process must be recovered for service expectations to be met, and the resources required to achieve this level of performance.
• Identify the dependencies between business processes.
• Summarize the findings in a Business Impact Analysis report.
• Present results to senior management to ensure consistency with business objectives...
Risk Assessment
Risk Assessment identifies the threats that could disrupt the organization's performance and determines the probabilities of consequences from each threat. A Risk Assessment helps determine whether you should ignore a threat, how much you should spend in taking action to reduce a threat, or whether you should plan for the recovery of operations if the threat occurs.
In a typical assignment, the stages include:
• Agree Terms of Reference and Scope of Work.
• Identify, working with your staff, the internal and external threats which could disrupt the critical processes identified in the Business Impact Analysis phase.
• Estimate the probability of such threats.
• Prioritize the threats according to an agreed formula.
• Summarize findings in Risk Assessment report.
• Present results to senior management
At every stage we work closely with you and your staff to ensure that the process, analysis and results are fully understood and meet your objectives.