article thumbnail

Business Continuity and Risk Management

BCP Builder

When you are evaluating the internal and external issues (Clause 4.1 of ISO 22301:2012) these can be sourced (in part) from the risk register and Enterprise Risk Management and evaluated with a Business Continuity Management lens. A generic “all hazards” plan ensures continuity regardless of the cause of the disruption.

article thumbnail

IRM, ERM, and GRC: Is There a Difference?

Reciprocity

Not long ago, risk managers concerned themselves mainly with hazards such as fires and floods; or in the financial sector, loan defaults (credit risk). 2007-2012): Audit management, enterprise, and operational risk management, compliance beyond financial controls, and more. Are there differences at all? Which is best?