An essential step in launching every business continuity activity is to determine potential events and environmental surroundings that could adversely affect the organization and its facilities with a severe disruption. We select exposures that are most likely to occur and that have greatest impact.

For the Y2K risk analysis for an international publishing company we reviewed facility construction, geographic location, corporate neighbors, facilities infrastructure, and community infrastructure.  We surveyed facility mangers built-in redundancies for utility services. We also surveyed mission critical vendors, suppliers, and outsourced processes.

For a Midwestern health insurance provider we developed an organization-wide method of risk information collection and final report review and distribution strategy that could be managed across business divisions and different organizational locations.

For a global payments processor we analyzed each critical application/ service and proposed a business recovery or service restoration plan. The options of rebuilding at time of disaster were based on principles of cost-benefit analysis in order to justify investment in controls to mitigate risks.

For a private equity investment firm we conducted a threat assessment to establish disaster scenarios based on risks to which the organization is exposed based on severe magnitude, occurring at the worst possible time, and result in severe impairment to the organization’s ability to conduct business.  Based on this assessment we articulated business controls to executive management and data center operations that would prevent or minimize the effects of potential loss.

In developing scenarios for business recovery, it is as standard practice to evaluate the impact of risks and exposures on availability of: personnel, technology as well as utility and transportation infrastructures.

For a retail banking chain, we identified needs for electronic and paper vital records and evaluated backup and restoration procedures in place.