Common Risks or Threats to an Organization
Identifying threats to an organization is a critical step in the creation of a Business Continuity Plan. There are two types of threats that need to be evaluated, man made and natural threats. Here is a list of a few of the hundred’s of threats an organization may need to identify. A few of the things to consider when determining the risks/threats to your organization are location, physical security, and internet and system security measures, which are currently in place.
|
Man Made |
Natural |
|
Strikes |
Hurricane |
|
Vandalism |
Mudslides |
|
Theft |
Fire |
|
Arson |
Pandemics |
|
Computer Viruses |
Flood |
|
Power Failure/Utility Failure |
Earthquake |
|
Terrorist Attack |
Tornado |
The following sources can assist you in identifying threats:
- Us Geological Survey (www.usgs.gov)
- National Weather Service
- Army Corp. of Engineers
- OSHA
- Utilities Companies
- Internal Survey
Whether it is an internal threat, or a man made threat, the business continuity plan needs to identify the threat and the impact it will have on your organization. A great way to determine the impact is to look first at your own companies history of events, and events that have recently occurred in your geographic area .
What is the biggest threat/risk to your organization?
Lisa DuBrock is a Partner and IT Compliance Practice Manager for The Radian Group, LLC. You can contact her via email.