One of the differentiators of the new approach to business continuity advocated by Adaptive BC is the removal of the business impact analysis and risk assessment from the business continuity process. But is that a realistic proposal? Continuity Central is currently conducting a survey to assess whether this is a realistic proposal. The interim results to the survey, based on the first 150 responses, can be seen below. To read the full introduction to the survey and to take part, click here.
Do you think that it is possible to omit the risk assessment from the business continuity process?
- Yes, and the resulting business continuity plan would be fully functional: 31.17%
- Yes, but the resulting business continuity plan would be weakened: 12.99%
- No, the risk assessment is a vital part of the business continuity process: 47.40%
- I’m not sure: 8.44%
Do you think that it is possible to omit the business impact analysis from the business continuity process?
- Yes: and the resulting business continuity plan would be fully functional: 21.43%
- Yes: but the resulting business continuity plan would be weakened: 6.49%
- No: the BIA is a vital part of the business continuity process: 65.58%
- I’m not sure: 6.49%
Respondents were asked to identify the business continuity standard which they are most familiar with and then were asked the following question:
Thinking about compliance with the business continuity standard, which comes closest to your view:
- A risk assessment and a BIA are both essential for compliance with this standard: 75.00%
- A risk assessment is essential for compliance with this standard but not a BIA: 4.73%
- A BIA is essential for compliance with this standard but not a risk assessment: 12.84%
- Neither a risk assessment nor a BIA are essential for compliance with this standard: 7.43%
The survey will remain open for a further week.
Source: Continuity Central
Are you surprised by the preliminary results? Do you believe that it is really possible to omit risk assessments and BIAs and still develop a functional business continuity plan? Please share your thoughts in the comment section below.
The interim results are interesting. I note that there is still a week remaining in which BC professionals can still voice an opinion.
Do you think that it is possible to omit risk assessments and BIAs and still develop a functional business continuity plan?