4/19/2023 0 Comments Tempest in a teapotHowever, there are so many moving parts to today’s complex enterprises that there must be a methodical way to identify, analyze and prioritize what is truly critical to protect. Some impact areas and their importance are obvious, such as inputs into the organization’s most important product or service. It stands to reason that the organization should have a methodology to identify what is critical so that risks can be properly treated relative to what they might impact. The financial system is probably more important to protect, right? Oftentimes, organizations have no reliable way to identify what is critical versus non-critical causing them to spend the same level of time, attention and resources to protect the less critical areas this is the ‘tempest in a teapot’ syndrome. A cyber attack could potentially impact both an organization’s financial and non-financial systems. This is all well and good, but what if the elements of the organization (e.g., business processes) that the risk could impact are not that critical and how do you know? Once the most potentially impactful risks are identified and analyzed, they are treated with controls and other mitigation activities to drive down the residual risk within the organization’s tolerable risk limits. They usually include identifying risks that could impact the organization and its reputation, profitability or strategies or its key assets, business processes, IT systems and locations. Most organizations perform some type of risk management activities. Anyway, something these phrases all have in common is “business impact analysis”. Of course my seven year old loved the ‘tempest in a potty’. ‘A storm in a wash-hand basin’, or ‘A storm in a cream bowl’ - England.'A storm in a glass of water' - Netherland.'A storm in a teacup' – Cicero or ‘Billows in a ladle’ – translation of Cicero’s writings. Doing a little research, I found other similar phrases I thought were entertaining. Do you ever use the term, ‘you are creating a tempest in a teapot’? It means, don’t make a big deal out of something that isn’t.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |