Business Continuity Risk Assessment · Business Continuity
What could stop our business, and are we doing enough about it?
For Chief risk officer, business continuity manager, operations director
A structured, all-hazards assessment that answers a simple question: what could disrupt our operations, how likely is it, and are our controls enough? Aligned with ISO 31000 and ISO 22301, it covers natural, technological, cyber, human and supply-chain threats across eight threat categories, and turns the results into a prioritized risk register, a heat map and practical treatment recommendations that feed BC strategy and investment decisions.
How we work
What we do
Open a step to see what happens and what you receive.
Context
We agree the method and the yardsticks with leadership first.
- Methodology approval with your executive sponsor
- Likelihood and impact scales
- Risk appetite thresholds
You receive: Risk Assessment Methodology and Scoring Criteria.
Threat Identification
We build the threat picture with the people who know the operation.
- Document and incident-history review
- Remote profile of the in-scope site
- One 90-minute workshop per business unit, plus IT, security and facilities sessions
You receive: Threat and Hazard Catalog across eight threat categories.
Analysis and Evaluation
Each risk is scored and tested against your controls and appetite.
- Score inherent risk
- Assess existing controls
- Evaluate residual risk against appetite
You receive: Risk Register (Excel) with risk heat map and control assessment.
Treatment and Reporting
Practical options for the risks that matter most.
- Treatment options for priority risks
- Heat map and executive report
You receive: Risk treatment recommendations, Risk Assessment Report and executive readout.
Want to know what this would look like for you?About 30 minutes with a practitioner from the practice that does the work. You’ll leave with a clear view of your next step.
Book a 30-minute conversationOutcomes
What you can expect
Assessment
- A prioritized, defensible view of the threats facing your operations
- Clear visibility of where existing controls are adequate and where they fall short
- Treatment recommendations that feed directly into BC strategy and investment decisions
Is this right for you?
Tick what sounds familiar
Select the needs that apply. We’ll collect them here so you can review the fit.
DeliverablesDeliverables (6)
- Risk Assessment Methodology and Scoring Criteria
- Threat and Hazard Catalog (eight threat categories)
- Risk Register (Excel) with heat map and control assessment
- Risk treatment recommendations
- Risk Assessment Report
- Executive readout
Good to know
Questions leaders ask
What is the difference between a BIA and a risk assessment?
A BIA looks at the impact on business processes if they stop. A risk assessment identifies the threats and vulnerabilities that could cause a disruption, and whether controls are enough. Most programs need both.
What is the difference between a risk assessment and a Technical Impact Analysis?
A risk assessment identifies threats. A Technical Impact Analysis measures what IT can actually recover, and how fast, against what the business needs.
Will this make us compliant or certified?
Our methods align with standards such as ISO 22301, ISO/IEC 27031, ISO 22361 and NIST CSF 2.0, and the work produces the documentation and evidence auditors look for. Whether you are compliant is a matter for your compliance team and auditors, and certification is performed by accredited certification bodies.
Why it matters nowThe numbers behind this
Related offerings
Often paired with
Business Impact Analysis Discover
“What must be recovered, and how fast?”Every recovery decision, from which plans to write to how much to spend on DR, depends on knowing which processes matter most and how quickly they must come back. Learn moreBusiness Continuity Program Assessment Discover
“Where does our BC program really stand?”An objective view of how your business continuity program works in practice. Learn moreBusiness Continuity Plan Development Design
“Do our business units have plans they will actually use?”A plan is only useful if the people named in it can pick it up during a disruption and act. Learn moreTalk with our team
Talk to us about Business Continuity Risk Assessment
Tell us the decision, deadline or problem in front of you.
- A reply from the practice that does the workThe practitioners who would deliver it.
- A short conversationWhat needs to happen, and by when.
- A written proposalWhat you would receive, how long it takes and the fee, before you commit.
No cost, no obligation.
Loading the form…
About 30 minutes with a practitioner from the practice that does the work, not a salesperson. It’s about your situation, and you’ll leave with a clear view of your next step. No cost, no obligation.
Loading available times…
Times are shown in your time zone. You’ll get a calendar invitation as soon as you book.