Glass

Guidance: choosing treatment options balances the benefits for the objectives against the cost, effort and disadvantages of implementing them. Options are not mutually exclusive and not all fit every situation; they include avoiding the risk by not starting or continuing the activity, taking or increasing the risk to pursue an opportunity, removing the risk ...

The organization identifies and selects risk responses.

Guidance: risk identification finds, recognizes and describes the risks that might help or prevent the organization achieving its objectives, and depends on relevant, appropriate and current information. A range of techniques can be used to find the uncertainties that affect objectives, and the following factors and the relationships between them should be c...

Use the impact analysis process to set continuity priorities and requirements: define the impact types and criteria relevant to the organization's context, identify the activities supporting delivery of products and services, assess impacts over time from disrupting those activities, fix the point at which non resumption becomes unacceptable, set prioritized...

Implement and maintain a risk assessment process that identifies the risks of disruption to the organization's prioritized activities and the resources they require, analyses and evaluates those risks, and determines which of them require treatment.

Identify candidate strategies and solutions by the extent to which they meet the requirement to continue and recover prioritized activities within the identified time frames and agreed capacity, protect those activities, reduce the likelihood of disruption, shorten its duration, limit its impact on products and services, and provide for adequate resources.

Select from the identified candidates on the extent to which they meet the required time frames and agreed capacity, fit the amount and type of risk the organization is prepared to take, and stand up on associated costs and benefits.