Risk Assessment

Risk Analysis (STAR) - Instructions

In the following section we will detail the steps needed to fill out the Risk Assessment and Business Impact Analysis portions of the document.

Before addressing the specifics of identifying the technology assets there are two sections users are encouraged to review and consider how they might be incorporated into individual report.

General Comments

The General Comments section has been included to give the user an opportunity to identify any special situations.  This may refer to the process that was used for the business impact analysis/risk assessment, or it could highlight any unique departmental characteristics.  For example, the department may utilize some special hardware/software, there may be some special locations (for experiments and such), or there may even be a dependence on someone else’s technology that needs to be explained.  Bottom line is the department can use this section as they see fit to further explain their business impact analysis/risk assessment.

Business Impact Analysis Process

The main thing to think about in this section is “what might be the impact if the office were to lose access to technology resources for a significant period of time” (that is, more than a week)?  This section can also be used to describe any specific business function, process, research, or extension environment that is unique within the realm of technology resources.

Back: Resources -- Next: Step 1