預防措施

緩解風險是指計劃並描述將採取的預防措施，以降低事件或事故的影響或嚴重性（Tay 等人，2022年)。

結合你所識別的風險及已確定的整體風險等級，需要制定哪些預防措施，以在事件發生時避免、消除或降低其影響？

Preventative Action

Mitigating risk is about planning and describing the preventative action that will take place to reduce the impact or severity of the event or incident (Tay et al. 2022).

Considering your risks and the overall level of risk you have determined, what preventative actions need to be in place to avoid, eliminate or reduce impact should the event occur?

應變計劃

應變計劃能通過替代方案和備援措施，填補從事件發生到業務運營完全恢復之間的空檔 (Childs & Dietrich， 2003年)。

請考慮，若事件已經發生，身為企業主的您應該準備哪些資源，以確保您的企業能繼續或恢復運營？

Contingency Planning

Contingency planning enables workarounds and backups to plug the gaps between the event and full restoration of operations (Childs & Dietrich 2003).

Consider that the event has occurred, what resources should you as a business owner have in place to ensure your business can continue or resume operations?

請完成《商業連續性計劃書》第二部份「風險管理矩陣」的最後兩欄。

Complete the final two columns of the Risk Management Matrix in Section 2 of your Business Continuity Plan.

風險管理矩陣

在《商業連續性計劃書》範本的第二部份，提供了以下風險管理矩陣示例。

風險說明

可能性

影響

風險等級

預防措施

應變計劃

生產流程中斷

關鍵設施和設備故障
廠房和設備損壞（如火災）

2 中

4 極高

8 高

確保購買充足的保險保障，包括營業中斷險和財產險
與合適供應商簽訂協議，為關鍵廠房和設備提供24小時維修和更換服務
尋找替代生產場地（如現有場地和設備受損）

在等待保險理賠期間，確保企業仍能取得並使用所需的廠房、設備與資源

盜竊

3 高

3 高

9 高

確保購買充足的保險保障，包括營業中斷險、財產險和盜竊險
安裝警報系統和影像監控設備

為您的庫存和設備制定盤點清單和更換時間表

當您完成風險管理矩陣，並經由可信賴的利益相關者審核後，我們建議您將風險項目重新排序，將數值最高的風險放在首位，以優先考慮預防措施和應變計劃。

例如，在上方矩陣中，盜竊的風險等級（9）高於生產流程中斷的風險等級（8），因此在優先順序順序的表格中，盜竊應列為首位。

Risk Management Matrix

The following risk management matrix example is provided in Section 2 of the Business Continuity Plan Template.

Risk description

Likelihood

Impact

Level of risk

Preventative action

Contingency plans

Interruption to production processes:

breakdown of key plant and equipment
damage to plant and equipment (e.g. fire)

2

Medium

4

Very high

8

High

Ensure adequate insurance cover in place including business interruption and general property
Set up agreement with suitable supplier for 24-hour repairs and replacement for key plant and equipment
Source alternative production site (if location and equipment have been damaged

Ensure you have easy access to plant, equipment and relevant resources while waiting for insurance payments.

Burglary

3

High

3

High

9

High

Ensure adequate insurance cover in place including business interruption and general property including theft.
Install alarm and video surveillance camera.

Develop an inventory and a replacement schedule for your property and equipment.

Once your risk management matrix has been completed and reviewed by a trusted stakeholder, you may wish to reorder the risks with the highest numbers listed first to prioritise your preventative actions and contingency plans.

For example, in the matrix above, the rating for burglary is a higher number (9) than the interruption to production processes (8) so burglary would be listed first in the table representing a priority order.