重大事件

重大事件指「可對組織或社區的正常運作產生正面或負面影響的預期或意外情況」（Edvardsson & Roos，2001年）。

根據貝爾 Behr 等人（2015年），識別未來可能發生的重大事件並評估其潛在影響，是風險管理的重要組成部份。

企業主也必須考慮，在重大事件發生期間及之後，必須保護人員和實體基礎設施（Castillo，2005年）。

例如，網絡中斷將導致客戶無法以電子方式支付產品或服務費用。因此，為所有員工和利益相關者提供備用方案是非常重要的。

重大事件可以是負面的，也可以是正面的。正面示例可以是在衛生危機或傳染病大流行期間，對本地個人防護裝備製造商的產品需求增加。

Critical Incidents

A critical incident is an 'anticipated and unexpected circumstance/s that can impact the normal operations of an organisation or community positively or negatively'. (Edvardsson & Roos 2001)

According to Behr et al (2015), identifying possible future critical incidents or events, and assessing their potential impact is a vital component of risk management.

Business owners must also consider that people and physical infrastructure need to be safeguarded during and following a critical incident or event (Castillo 2005).

For example, a loss of internet will eliminate your ability for customers to pay for products or services electronically. Therefore, it's important to have a back-up plan available to all staff and relevant stakeholders.

Critical incidents can be positive or negative. A positive example could be the increased demand for a local manufacturer of personal protective equipment during a health crisis or pandemic of contagious diseases.

風險類型

風險可能是直接或間接、內部或外部的：

直接：在您控制範圍內的商業風險
間接：超出您控制範圍的商業風險
內部：可在企業內部預防或緩解的風險
外部：您無法控制的外部風險

Types of Risk

Risks may be direct or indirect, internal or external:

Direct: a risk to your business that is within your control
Indirect: a risk to your business that is out of your control
Internal: risks you have the power to prevent or mitigate within your business
External: risks you have no control over

風險分類 (Hoffman，2002年)

風險可按不同方式分類。以下為常見類別及其說明與示例，其中有些風險的後果比其他風險更嚴重。

Classifications of Risk (Hoffman 2002)

Risks can be classified in many ways. Below are recognised categories with accompanying descriptions and examples. Some of these risks have greater consequences than others.

風險	說明	示例
外部	與組織無法控制的外部因素相關的營運受限風險	法律或行業法規變更
實體資產	與基礎設施損壞相關的產能不足風險	建築物或設備損壞
系統與技術	與系統或技術相關的中斷風險	網絡中斷
人員	與僱用人員相關的損失風險	無意的人為失誤、故意盜竊

Risk	Description	Example
External	Risk of limited operation associated with external factors outside the control of the organisation	Changes to laws or industry regulations
Physical assets	Risk of inadequate capacity associated with damage to infrastructure	Damage to buildings or equipment
Systems and technology	Risk of interruption associated with systems and/or technology	Loss of internet
People	Risk of loss associated with the employment of people	Unintentional human error, deliberate theft

請開始填寫風險管理矩陣

您可以識別出企業面臨的哪些潛在風險？請訪問昆士蘭商業局（英文）網站，並使用任何適用的範例及根據您自己的情況，填寫《商業連續性計劃書》第二部份「風險管理矩陣」中的「風險描述」欄。

Begin completing the Risk Management Matrix

What potential risks can you identify to your business? Visit the Business Queensland website and use any applicable examples, as well as your own, to complete the 'Risk Description' column in Section 2 of your Business Continuity Plan.