Business strategies

Answer:

I'm assuming you are referring to business continuity strategies. Considering that, the main variables you have to consider together with the results of business impact analysis and risk assessment are the available resources (e.g., personnel, capital, equipments, etc.), potential solutions (e.g., build/rent facilities/equipment, adopt new technologies, modify processes, etc.), business objectives, and risk tolerance. The business continuity strategies to be adopted will have to balance all this variables. For example, if technical solutions are too expensive, you may have to rely on a strategy based on administrative controls, and maybe increase your risk to lerance. On the other hand, you may identify that lowering risk tolerance is not an option (e.g., because of legal requirements), and you may have to adjust business objectives.

These articles will provide you further explanation about formulating strategies:
- Developing the business continuity strategy according to ISO 22301 [free webinar on demand] https://advisera.com/27001academy/webinar/developing-the-business-continuity-strategy-according-to-iso-22301-free-webinar-on-demand/
- Can business continuity strategy save your money? https://advisera.com/27001academy/blog/2010/03/15/can-business-continuity-strategy-save-your-money/