Good day,
Great discussion indeed.
Based on the results of the BIA, management will decide what will be
the scope and focus of the Business Continuity Plan. The BIA cannot
tell you the scope and focus as it was mentioned, it is management
based on the results of the BIA that will decide what the scope and
focus will be.
A risk is a factor of impact and likelihood. The NIST standard has
some great example and diagrams explaining it. Impact alone does not
tell you much, you have to know how likely it is to happen and by
combining the two you see if it is an acceptable risk or a risk that
must be addressed.
Best regards to all
Clement
> To view this discussion on the web visit
https://groups.google.com/d/msgid/cissptalks/CY4PR03MB24212B9989BE2B7449224B6AAB010%40CY4PR03MB2421.namprd03.prod.outlook.com.
---------------------------------------------------------------------------------------------
Clement Dupuis, CD
CCCure Owner and Founder
Chief Learning Officer (CLO) and Security Evangelist
The CCCure Family of Portals
GCFW, GCIA, Security+ 301, CEH V7, CCSA, CCSE, + 12 others
For support or queries send an email to: Sup...@CCCure.Com
----------------------------------------------------------------------------------------------
Maintainer of :
The CCCure Learning Portal - Find the best Security Tutorials
The CCCure Quiz Engine
Knowledge sharing and giving back to the community