Vincent DeGiorgia - Technology Risk consulting Services, LLC, Rob Moody PE - Technology Risk Consulting Services, LLC (SSA Journal Volume 13 Number 4 - Winter 1999 pp. 19 - 22 )
Risk mitigation can reduce the severity and likelihood of an incident. However, regardless of the mitigation strategy, some residual risk always remains - whether for practical or economical reasons. The potential impacts form these types of situations are best minimized through the Incident Readiness component of the Business Continuity Planning and Recovery Process. An organization's Incident Readiness Program can be enhanced by integrating the company's departmental expertise and pre-qualified, external specialists into the Incident Readiness Program. This paper will examine who these "Expert Resources" might be and outlines a methodology to pre-qualify outside specialists with the objective of enhancing incident readiness.