Think about your environment and what are the
qualitative risks that you may have?
An example of a qualitative risk could be reputational harm
that's brought upon the organization.
It may not be that the organization has been disrupted in a particular service,
but it may be the communication of a particular event that brings
about this detrimental effect on the organization.
From a quantitative perspective, what could be the opportunity cost that's lost?
Can you calculate and understand the services that your business provides and
think about what a disruption to those services could cause?
Then, we have to consider what the risk treatment might be.
It could be that the organization wholly decides that no further
action is necessary based upon the prohibitive cost of
implementing a particular type of modification.
So they may retain the service the way in which it is or they could think about
actually sharing some of the possible load of a bad outcome.
Next, join us over in the next clips,
as we consider cloud audit and assurance to have greater confidence
about consuming cloud services from a provider.