article thumbnail

The Ultimate Guide to Residual Risk  

MHA Consulting

In deciding its risk tolerance level, management should analyze the cost to the organization of having its operations offline. An organization that can undergo an outage of five days at no great cost is justified in having a high risk tolerance. Where risk tolerance is high, controls can be relaxed. Risk limitation.

article thumbnail

Who’s the Boss? Successful Risk Mitigation Requires Centralized Leadership

MHA Consulting

Try a Dose of Risk Management As a business continuity professional, I tip my hat to any organization that makes a serious effort to reduce its risks. Unfortunately, many companies do not get their money’s worth when it comes to implementing risk mitigation controls.