Session at a Glance
Title: 107: Why Risk Assessments Should not be Checklists
Speaker: Alvaro Orrantia
Stream: Practice and Principles
Time: 9:45 - 10:45 AM (EST)
   
Description
Many organizations today that engage a third party to conduct a risk assessment, end up with a checklist approach that summarizes the “NO’s” in a colorful report. This presentation focuses on the elements you should look for in a serious risk assessment that will later support your business continuity program.
 
Speaker Bio

Alvaro is Assistant Vice President at PwC with over 17 years of experience and holds CBCP and CISSP certifications. He has conducted numerous business continuity / disaster recovery projects, physical security reviews and BCP program assessments for a wide range of industries, including health care. Previously, Alvaro led the information security and business continuity areas at a major Canadian service provider; he has hands-on experience on managing business continuance through significant events such as SARS, hurricane Juan and the 2003 blackout.


Alvaro has also managed the implementation of information security, disaster recovery and business continuity solutions, establishing best practices, policies, standards and technical procedures. He has also previously held a variety of Information Technology management positions in the telecommunications and construction sectors.

Co-Speaker Bio


Scott Crowley is Associate Partner leading PwC’s Business Continuity and Security Practice; he has over 18 years experience in effectively designing, implementing and advising on integrated security, asset protection, business continuity, crisis management, risk management and performance improvement programs for a diverse range of organizations. These programs utilized techniques such as risk identification; strategic planning; crisis communications; incident command system; disaster recovery and the implementation of sound risk reduction strategies.


For many years, Scott directed the Risk Management and Emergency Management program for a major corporation. In this position, Scott established and directed an integrated risk and emergency management program, to effectively identify, assess, prevent, control and mitigate risks associated with the corporations existing and emerging operations. His responsibilities included facilitating the development of sound solutions to potential risks and threats to the organization ensuring the security of its 80,000 employees at 650 locations; $11 billion in assets, and vast distribution and transportation network. He also contributed to the earnings stability of the organization through entity-wide risk management, risk control, crisis management, asset protection, and risk-based financing.