Enterprise Risk Assessment and Business Impact Analysis: Best Practices [Paperback]

Andrew Hiles (Author)

Book Description

Publication Date: March 13, 2002

More than ever, the basic lesson for business managers and for business continuity professionals is: anything can happen! This book is a guide to best practices in understanding risk and business impact. It provides essential guidance for the identification, management and control of risks confronting businesses --- What might happen? How will our enterprise be affected? What will the impact be? Answering these questions accurately and objectively is essential to Business Continuity Management, business success - and even business survival. The helpful examples all have their roots in real cases and come heavily laden with pragmatism. Over fifteen years experience in blue chip environments, large and small, public and private, has gone into developing the methods described. Others come with a respected pedigree from a variety of industries. Your own "right way" for risk management means picking, matching and tailoring from the cases, guidance and examples provided, and building on existing best practice within your organization. "This book is intended to provide guidance and examples for the identification, management and control of risks. Wherever practicable, we have used case studies and examples to illustrate the points. "It is impossible to cover every industry, every process and every activity in work of this sort. We have therefore made the work as comprehensive as practicable and focused particularly on those risk areas of generic value to the reader, while providing references and case studies relevant to specific market sectors. "Many examples are provided throughout this guide: these all have their roots in real cases and come heavily laden with pragmatism. Over fifteen years experience in blue chip environments, large and small, public and private, has gone into developing some of the methods described. Others come with a respected pedigree from a variety of industries. Your own "right way" for risk management means picking, matching and tailoring from the cases and examples provided and building on existing best practice within your organization. "Where practicable we have provided examples of different methodologies so that the one most appropriate to the reader's organization's business continuity maturity and culture can be selected. The author is also conscious that it can only be a partial picture of what is a global business continuity industry. However, we have tried to be representative as far as practicable, illustrating issues, approaches and requirements from various countries."

Editorial Reviews

About the Author

Andrew Hiles, FBCI, is founder and Chairman of Survive, the international user group for business continuity planning and was a founding Director of the Business Continuity Institute, the international body for certification of business continuity professionals. He is a founder Director of Kingswell, international consultants. Having commenced his management career with the Royal Air Force, he pioneered IT systems before leaving to take up a position within the Finance Department of London Transport. Subsequently in their Central Productivity Unit he was a Senior Projects Manager and later became responsible for the business re-engineering function, implementing new services and major technical projects. He left to take up a position with the UK Post Office as their first Business Systems Consultant responsible for major projects. Andrew then joined the UK Atomic Energy Authority at the Harwell Laboratories where he managed the supercomputing, mainframe!! and other bureau and facilities management services.

Andrew was a founding director of Kingswell, an international consulting company with a blue chip client base specializing in Enterprise Risk Management, Business Continuity, and Disaster Recovery and in Service Management. Andrew is a pragmatic global consultant and trainer in these areas.

Andrew is an international speaker on risk management, business continuity and contingency planning and has featured on conference programs in the USA, Southern Africa, Europe, the Middle East and the Pacific Rim. He has presented workshops and seminars on these topics for Frost & Sullivan (Europe), IIR/ IFF (Europe and Middle East), AIC (South Africa), CEL (Hong Kong), UPOM (Saudi Arabia) and other companies having also lectured at Ashridge, Cranfield, GEC Dunchurch and Henley Management Colleges in the UK. He has broadcast on radio, TV and on Internet webinars.

He has over 300 published articles on business continuity. He is the author of Business Continuity Management: Best Practice, published by Rothstein Associates Inc. 2000, He co-edited and was the major contributor to The Definitive Guide to Business Continuity Management (published by Wiley, 1999) and The IBM GUIDE UK Disaster Recovery Manual. He contributed to the Confederation of British Industry business guide, Business Continuity Management and to the Institute of Directors / Department of Trade and Industry Business Continuity Guide.

Andrew is a Fellow of the Business Continuity Institute, a Member of the British Computer Society and a Freeman of the City of London.

Product Details

• Paperback: 286 pages
• Publisher: Rothstein Associates Inc. (March 13, 2002)
• Language: English
• ISBN-10: 1931332126
• ISBN-13: 978-1931332125
• Product Dimensions: 10.6 x 8.4 x 0.9 inches
• Shipping Weight: 1.9 pounds (View shipping rates and policies)
• Average Customer Review: 2.5 out of 5 stars  See all reviews (6 customer reviews)
• Amazon Best Sellers Rank: #2,227,195 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

3 of 3 people found the following review helpful:

4.0 out of 5 stars A Useful Guide, November 20, 2004

By 

Book Bug "Yvonne" (UK) - See all my reviews

This review is from: Enterprise Risk Assessment and Business Impact Analysis: Best Practices (Paperback)

The book brings together many different ideas and theories of risk from around the world and provides practical examples of risk management techniques, checklists etc. If, like me, you are not a seasoned risk professional, you will find it a helpful guide to get you launched in risk management and a useful reference book as you practice the subject.

2 of 2 people found the following review helpful:

4.0 out of 5 stars Thorough Treatment, June 1, 2005

By 

Douglas M. Henderson (Port Saint Lucie, FL USA) - See all my reviews
(REAL NAME)   

This review is from: Enterprise Risk Assessment and Business Impact Analysis: Best Practices (Paperback)

The Enterprise Risk Assessment and Business Impact Analysis book is a very thorough treatment of the Risk Analysis, Business Impact Analysis and Recovery Strategies professional areas of competencies recommended by the Disaster Recovery Institute International (DRII) and the Business Continuity Institute (BCI). The DRII and BCI are the largest professional groups establishing industry standards and membership educational requirements on a worldwide basis in the continuity and disaster recovery field.

Enterprise Risk Assessment and Business Impact Analysis book is designed for use primarily by professionals but can be used by a serious non-professional. If there is anything difficult about developing a good Business Continuity Plan it is first developing a good Business Impact Analysis that includes a thorough risk assessment and identifies a workable recovery strategy(ies). With a good Business Impact Analysis a good Business Continuity Plan can subsequently be developed. Without a good Business Impact Analysis it is not possible to develop a good Business Continuity Plan.

The book is easy to read and makes very liberal use of Appendices in every section, thus allowing the serious user to selectively examine specific topics in detail. For the professional / plan developer there are numerous tables and checklists that are useful developing the actual Business Impact Analysis. By following the book a good Business Impact Analysis can be developed, especially if a good planning template or actual Business Impact Analysis from a similar business is available as a guide.

Enterprise Risk Assessment and Business Impact Analysis deserves a 4-star rating.

Why not 5 stars? Section II is rather long. I admit some of it can be skimmed and I am being picky.

Douglas M. Henderson, FSA, CBCP
Disaster Management, Inc.

3 of 4 people found the following review helpful:

4.0 out of 5 stars A Handy Tool for Practitioners, January 3, 2003

By 

Paul Kirvan (Tinton Falls, NJ USA) - See all my reviews

This review is from: Enterprise Risk Assessment and Business Impact Analysis: Best Practices (Paperback)

Despite all the resources available in the business continuity profession - whether in print or on the Internet - it's always a good idea to have a handy tool for key activities such as risk assessments and business impact analyses. Andrew Hiles has written a highly useful set of best practices for these important activities. It's especially useful if you are new to the profession, and a worthwhile addition to your library.