Risk assessments --- I've had experience with business continuity planning in larger organizations...The regulators set forth rules that large firms had to implement...But, what happens in the business continuity planning process is - firms use consultant services and the process transforms more or less in just another bureaucratic work assignment. At the end of the process a firm will have all the needed paperwork with designated teams, processes and procedures, but the real question is will it have objective capacity to do anything aside of reading/studying the paperwork. Will it be more resilient if an incident occurs? The problem often lays if an organization will have enough highly trained relevant experts/individuals...and this is a huge problem for developing countries (lack of human capacity).

Source author: Vladimir Nikolov vladimir984@yahoo.com