On Risk Management, Business Continuity, and Security
|23 April, 2017|
A Location is any place where any business activity is carried our or where a resource is located.
If you look on the left hand side, there are various special locations pre-defined:
Note in particular the distinction between No Location and Unknown Location. The first is used for things which do not have a meaningful or relevant location. The second is used for things which have a location, but we have not entered it yet. At the end of your analysis, the Unknown Location should not contain anything.
Typically you will start by creating a sub-location (right-click on All Locations) representing your building (if you only have a single building) or site (if you have multiple buildings). You will then add additional sub-locations if you identify threats which only apply to part of a location (e.g. only the basement area might be threatened by flooding).
Note that some sections are omitted if they are not meaningful for a particular location.
|Description||A short description of the location.|
|Location||The location which includes this location as a sub-location.|
|Organization Unit Responsible||The part of the organization responsible for this location, and thus for controlling any direct threats to it.|
|Replacement Costs||The costs associated with replacing this location. To avoid double-counting, this should not include the cost of replacement of any resources at this location, but it should include the cost of replacing any sub-locations. Note that the replacement cost for a building may include demolition costs for the remains of the existing building, as well as the cost of rebuilding.|
|Sub-Locations||A list of any sub-locations of this location.|
|Activities at this Location.||A list of all the activities that have been identified as taking place at this location.|
|Resources at this Location.||A list of all the activities that have been identified as being located at this location.|
|Direct Threats||A list of all the threats which have been identified as directly affecting this location.|
|Indirect Threats||A list of all the threats which have been identified as affecting a location of which this forms part.|
|Disruption Risk||A set of estimates of the probability that the location is disrupted during a single year.|
|Disruption Timeline (With Recovery)||Assuming that an incident disrupts the location, a timeline showing the immediate and subsequent effects of the location being disrupted. This timeline assumes that all activities and resources are recovered by their recovery time objective.|
|Notes||A section intended for additional notes on such topics as how any data was gathered and what assumptions were made.|
© Albion Research Ltd. 2017