Guest user Created: Jan 03, 2017 Last commented: Jan 03, 2017

Is the risk assessment done before the BIA?

In your experience is the risk assessment done before the BIA or after? Is it important which is done first?

0 0

Assign topic to the user

Select user

Dejan Kosutic Jan 03, 2017

Answer: ISO 22301 (and most of other business continuity methodologies) allow you to do it either way, and the truth is - I don't think there is a huge difference. My personal preference is to do the risk assessment first, because then you'll have a better impression of which incidents can happen while doing your business impact analysis.

You'll learn more here: Risk assessment vs. business impact analysis https://advisera.com/27001academy/knowledgebase/risk-assessment-vs-business-impact-analysis/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 02, 2017

Expert Advice Community