|
EPCB's three step risk management framework aligns with the International Risk Management Standard (ISO 31000)
KEY STEPS TO ESTABLISHING CONTEXT
1. Develop the Risk Management Framework. In particular address the following issues:
a. Establish the risk management manadate - engage with stakeholders - challenge and encourage their commitment.
Map the demonstrated commitment (from those only interested in "ticking the box", to those with a commitment to "build our resilience").
b. Develop and design a framework for managing risk which is aligned with ISO 31000 and tailored to the entity;
c. As a prudent initial step, we suggest you measure the gap between where you are and where you need to be. To map capability gaps explore the performance areas with groups in workshops and structured discussions with key individual stakeholders;
Click here for our free paper on Risk Management Self Assessment Frameworks (pdf)
d. develop a map of stakeholders against their roles and responsibilities;
e. develop a map of stakeholders against their accountabilities;
f. identify policy issues (internal and external);
g. identify process issues (within the organizations and with suppliers);
h. identify resource issues (broadly - across people, plant, site, capital etc);
i. develop a budgeted and scheduled plan and business case for anticipated research and consultation; and
j. map communication issues - include drafting the scope of a communication plan which will support the development of the risk management framework.
2. Apply strategies to seek and obtain stakeholders’ co-operation and ownership of the risk management context including:
a. establish and coordinate open communication structures among the networks mapped;
b. consult with stakeholders to map their issues and needs across the following aspects or “spaces” - social, legal, technical, political, environmental, and financial; and
c. identify criteria and thresholds for “acceptable risk” across the aspects or “spaces” identified with stakeholders; and document the level of agreement and divergence between stakeholders regarding risk criteria to be applied. Two sets of criteria should be addressed. Risk assessment criteria – that is, “what do we care about - and how much do we care”; and what are agreed risk treatment selection criteria to be applied.
Early in establishing your context it is critically important to
establish assessment criteria which reflect your "risk appetite".
Click here to download an example of risk assessment criteria (66 KB pdf).
3. Profile the entity for which “context” is being established (e.g. the structure of the organisation; or the demographics of a community) by mapping key networks including:
a. relationships between people and organisations to identify and evaluate existing networks; and
b. other network relationships that do not exist, but which might add value should they be developed and established through negotiation, consultation and marketing strategies to gain trust cooperation and support.
Profile your organisation and its reliance on resources.
Download the "APQC Process Classification Framework" (pdf).
This framework is a widely accepted, tested over time and very useful context and process mapping tool.
It is a sound and logical way to map your key (business) processes, and explore the things upon which those functions rely.
This will help you to focus on areas of vulnerability and opportunities for improvement.
What do you rely on?
Use a Business Impact Analysis to consider critical products and services - focus on key underpinning functions, processes.
Premise the interdependency and vulnerability of the resources those key functions and processes depend on.
MAP YOUR RESOURCE PROFILE
Click here To see how Business Impact Analysis (BIA) maps your resource reliance and vulnerabilities (pdf)
The structure of the MS Excel tool used to capture your vulnerability profile
Video clip of how file 14a (Complete Continuity Toolkit) maps your resource profile and risks - before and after impact (4min 38secs)
Link to an example illustrating a different context
| |
Description |
Price |
1. |
Buttress - Business Continuity and Crisis Management Software
Meet the CEO's requirement - tailored reports address your decision making needs (for prevention, response and recovery). An easy to use Access Database, Guidelines and Crisis Management Planning Framework. Immediately available for download as a Zip file. |
$85.50 |
2. |
Complete Continuity Toolkit
Guidelines, tools and templates. Our most popular download. In one immediately available Zip folder, seventeen Microsoft files (Word; Excel; and PowerPoint.) - readily tailored to meet your needs. Unsolicited Feedback: "Many thanks. This toolkit is brilliant!" (Mr. Doug Nelson, MBCI, CBCP, Business Continuity Manager, CHIRON, Emeryville, California.) |
$49.95 |
|