This can be complex and demanding. To assist in this area therefore there are a number of tools available. The most widely known of these is COBRA, which employs a method aligned to various international standards.

The science of risk assessment is currently beyond the scope of this portal, but hopefully the information presented below may give you some insight into this task and some guidance in terms of what is included.

THE THREATS
Part of the risk process is to review the types of disruptive events that can affect the normal running of the organization.

There are many potential disruptive events and the impact and probability level must be assessed to give a sound basis for progress. To assist with this process the following list of potential events has been produced:

Environmental Disasters
• Tornado
• Hurricane
• Flood
• Snowstorm
• Drought
• Earthquake
• Electrical storms
• Fire
• Subsidence and Landslides
• Freezing Conditions
• Contamination and Environmental Hazards
• Epidemic

Organised and / or Deliberate Disruption

• Act of terrorism
• Act of Sabotage
• Act of war
• Theft
• Arson
• Labour Disputes / Industrial Action

Loss of Utilities and Services

• Electrical power failure
• Loss of gas supply
• Loss of water supply
• Petroleum and oil shortage
• Communications services breakdown
• Loss of drainage / waste removal

Equipment or System Failure

• Internal power failure
• Air conditioning failure
• Production line failure
• Cooling plant failure
• Equipment failure (excluding IT hardware)

Serious Information Security Incidents

• Cyber crime
• Loss of records or data
• Disclosure of sensitive information
• IT system failure

Other Emergency Situations

• Workplace violence
• Public transportation disruption
• Neighbourhood hazard
• Health and Safety Regulations
• Employee morale
• Mergers and acquisitions
• Negative publicity
• Legal problems