By walking through various disaster scenarios, organizations can pinpoint their greatest business threats, as well as identify their control gaps, which increase the impact of the threat. By doing this, the business continuity team can prioritize risks and spend time only on the threats and risks that are most likely to occur and/or have the potential to severely impact the organization. In addition, the risk assessment process and results can help aid crisis communications and awareness.
This disaster recovery risk assessment audit program addresses environmental, man-made, business and IT threats. It focuses on defining the risk assessment scope, gathering base data, performing interviews, etc.