Individual accountability for the management of the risk should be clearly established.
A formal "disaster" can only be declared by the firm owners or by the IT Department Manager.
Risk ownership must be clearly set out, documented and agreed with the individual owners at all levels of the operational risk management process.
Which risk group is associated with risk of physical assets failing/being damaged or enhanced?
Damage assessment includes all but which of the following steps?