Skip to content Skip to institutional links

Common menu bar links

Breadcrumb Trail

Institutional links

Chief Information Officer Branch

IT Project Review and Oversight

Enhanced Management Framework

Versions

ARCHIVED - A Guide to Effective Business Continuity in Support of the Year 2000 Challenge

Warning This page has been archived.

Archived Content

Information identified as archived on the Web is for reference, research or recordkeeping purposes. It has not been altered or updated after the date of archiving. Web pages that are archived on the Web are not subject to the Government of Canada Web Standards. As per the Communications Policy of the Government of Canada, you can request alternate formats on the "Contact Us" page.

Appendix J - Sample Risk List

The following sample risk list contains the following information:

Risk Id;
Risk statement; and
Context/background.

The definitions for these attributes are located in Appendix I – Risk Information Sheet.

Table J-1: Sample Risk List

Risk Id	Risk Statement	Context
Contingency Planning	There is a risk that contingency plans may not be created/updated for certain Branches since this was an activity that seemed to have less priority over other operational and Year 2000 activities.	A Year 2000 contingency plan in the context of this risk is "a plan which will identify how a particular business function will be performed should a system fail due to the Year 2000 problem".
	Lack of contingency planning may result in an inability to resume certain business functions which may have social, legal and political implications;	There were discussions of disaster recovery plans and business resumption plans during the interview sessions and during the risk assessment, but very little information was provided regarding Year 2000 contingency plans.
Human Resource Planning	There is a risk that "Dept. X" may not be able to assemble all the resources needed to support its Year 2000 conversion as evidenced by resource losses to the private industry and the current significant reliance on industry to fulfill its current role.	As of July 1997, the following actions had been performed: The Year 2000 Project Office has develop and issued a RFP for Year 2000 work;
	The impact related to this risk is schedule delays, and the possibility of not completing all of the planned Year 2000 conversions;	The Year 2000 Project Office has initiated the development of an alternative procurement strategy for resource requirements which cannot yet be identified (business, infrastructure, Year 2000 Project Office types of resources); The Year 2000 Project Office has initiated the development of a Human Resource strategy/plan.
Operational Activities	Operational activities may focus priorities away from the Year 2000 problem and place additional demands for similar resources. The potential for the outsourcing option also adds more uncertainty and complexity in an environment that is already complex. The impact related to this risk is an increase in resource requirements and the potential for some Year 2000 conversions to not be ready on time.	Many development projects are being conducted in parallel such as project "X", "Y", and "Z".