article thumbnail

Risk Management as a Career: A Guide for BCM Professionals

MHA Consulting

As a reminder, risk management is the process of understanding the hazards facing an organization and taking steps to bring them to within a level determined to be acceptable by the senior leadership. It’s not about eliminating risk completely but managing it in a rational, informed way. Transferring risk.

article thumbnail

At Risk of Distraction: The Seductive Appeal of RMIS Software

MHA Consulting

An emerging hot topic in business continuity and risk management is the software known as a risk management information system (RMIS). An RMIS can help an organization identify, assess, monitor, and mitigate risks, but often they merely seduce and distract companies that are not in a position to make proper use of them.

BCM 84
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

These 8 Risk Domains Are the Meat and Potatoes of Risk Management 

MHA Consulting

(Sometimes the potential consequences of a given risk are too small to worry about.) Rather, we do it as a starting point for conducting a cost/benefit analysis of each risk and ultimately applying one of the four main risk mitigation strategies: risk acceptance, risk avoidance, risk limitation, or risk transfer.

article thumbnail

5 Steps towards an Actionable Risk Appetite

LogisManager

Risk tolerances, on the other hand, set acceptable levels of variation in performance that can be readily measured. For example, a company that says it doesn’t accept risks that could result in a significant loss of its revenue base is expressing a risk appetite. Risk Appetite. Risk Tolerance.

article thumbnail

The Ultimate Guide to Residual Risk  

MHA Consulting

Risk limitation. A strategy in which measures are taken to reduce risk, short of completely eliminating it. Incorporates a combination of the strategies of risk avoidance and risk acceptance. Risk transfer. Most organizations use some combination of all of these strategies to manage their risks.

article thumbnail

SOC 2 vs ISO 27001: Key Differences Between the Standards

Reciprocity

SOC 2 and ISO 27001 complement each other by giving you a strategy for securing your information landscape and for demonstrating the security of your environment. Designed by the International Standards Organization (ISO), ISO 27001 spells out industry standards for an information security management system (ISMS). What Is an ISMS?

Audit 52
article thumbnail

Business Continuity and Risk Management

BCP Builder

Business Continuity Management risk is a sub domain of Enterprise Risk Management, like Information Security Risk Management or Health and Safety Risk Management. The Business Impact Analysis pulls from the Enterprise Risk Management process, the Business Continuity Plan is a series of contingency actions.