Business Concerns and Risk Management

•Agreements between organizations that have interconnected IT systems

KNOW THIS FORMULA - ALE is calculated as

The target time for the resumption of normal operations after an incident has occurred

•Risk: The chances of something going wrong

Establishes terms, conditions, and expectations of the business partner relationship

A measure of how long it is expected to take before a problem/outage is resolved/repaired

•Provides employees with a better understanding of other parts of the business

An Objective Measure

•The value of a loss that can be expected from a single event

A subjective Measure

The target time for the resumption of normal operations after an incident has occurred

•An estimate of how often an event will occur in a year

Ensures that an employee is not solely responsible for all aspects of a job process

How much an event will cost a company on an annual basis

Impact: Costs associated with unrealized risk

•An agreement between parties to achieve one or more common objectives/ less formal than an SLA

employee/contractor/other third party agrees not to disclose confidential information

is a part of a system that, if it fails, will stop the entire system from working.

•The maximum period of acceptable data loss

is more formal than an MOU,It is legally binding and enforceable

mandatory, step-by-step instructions set by the organization

•A contractual agreement between a provider and a consumer

•Clean desk policies: Sensitive information must not be left unsecured in work areas