Customer Reviews

Enterprise Risk Assessment and Business Impact Analysis: Best Practices

5 star:		(0)
4 star:		(3)
3 star:		(0)
2 star:		(0)
1 star:		(3)

 

 

The book brings together many different ideas and theories of risk from around the world and provides practical examples of risk management techniques, checklists etc. If, like me, you are not a seasoned risk professional, you will find it a helpful guide to get you launched in risk management and a useful reference book as you practice the subject.

The Enterprise Risk Assessment and Business Impact Analysis book is a very thorough treatment of the Risk Analysis, Business Impact Analysis and Recovery Strategies professional areas of competencies recommended by the Disaster Recovery Institute International (DRII) and the Business Continuity Institute (BCI). The DRII and BCI are the largest professional groups establishing industry standards and membership educational requirements on a worldwide basis in the continuity and disaster recovery field.

Enterprise Risk Assessment and Business Impact Analysis book is designed for use primarily by professionals but can be used by a serious non-professional. If there is anything difficult about developing a good Business Continuity Plan it is first developing a good Business Impact Analysis that includes a thorough risk assessment and identifies a workable recovery strategy(ies). With a good Business Impact Analysis a good Business Continuity Plan can subsequently be developed. Without a good Business Impact Analysis it is not possible to develop a good Business Continuity Plan.

The book is easy to read and makes very liberal use of Appendices in every section, thus allowing the serious user to selectively examine specific topics in detail. For the professional / plan developer there are numerous tables and checklists that are useful developing the actual Business Impact Analysis. By following the book a good Business Impact Analysis can be developed, especially if a good planning template or actual Business Impact Analysis from a similar business is available as a guide.

Enterprise Risk Assessment and Business Impact Analysis deserves a 4-star rating.

Why not 5 stars? Section II is rather long. I admit some of it can be skimmed and I am being picky.

Douglas M. Henderson, FSA, CBCP
Disaster Management, Inc.

Despite all the resources available in the business continuity profession - whether in print or on the Internet - it's always a good idea to have a handy tool for key activities such as risk assessments and business impact analyses. Andrew Hiles has written a highly useful set of best practices for these important activities. It's especially useful if you are new to the profession, and a worthwhile addition to your library.

I had mixed feelings from the reviews when I set out to order this book and, in retrospect, I should've listened to my gut.

This book is so full of typo's that it should've never hit the presses. I could live with that if the material had any benefit regarding the subject at hand, but it didn't.

The author may have risk management credentials from his work experience but they never translated to the written page. Totally useless !!!!!

The book tries to address Enterprise Risk Assessement. It tries to be all things to all people. The material found in it can be found over the web. It has very little in terms of relevant information. Save your money and opt for a practical solution instead.

This book is so poorly written that after just 60 pages I wonder if I should even continue reading. Even if you get past the multitude of typos, incorrect grammar and inconsistencies, the total lack of structure makes this a difficut book to read. In short, it is a work of an amateur writer. That he may be a subject matter expert I don't contest, but he surely makes for a poor writer. The book is very disjointed and this makes following the reasoning almost impossible. I am very sorry I invested in this and had I had a choice I would have given it no stars.