A detailed description of the company or organization. This must include the specific IT security risks facing that company. A complete BIA including the following: A complete asset identification and evaluation matrix A complete qualitative risk analysis, using FRAAP or another technique of your choice A complete quantitative risk analysis A complete risk mitigation strategy with associated costs Preparation of a contingency budget to manage identified risks and mitigation strategies

Leave a Reply

Your email address will not be published. Required fields are marked *