3 Conclusion

The process of risk assessment and treatment is fundamental to the implementation of a successful Business Continuity Management System (BCMS) and forms a significant part of the ISO22301 standard. Only by fully understanding its risks can an organization hope to ensure that the controls it has in place are sufficient to provide an appropriate level of protection against business continuity threats.

By following this process [Organization Name] will go some way to ensuring that the risks that it faces in the day to day operation of its business are effectively managed and controlled.