ANSI SCTE 227-2016 pdf free download.Cable Operator Location Risk Assessment Operational Practice
1.1. Executive Summary
A location risk assessment (LRA) is performed to identify threats that could negatively impact the ability to conduct business in a geographic location. The results of the LRA help to align strategic business decisions with effective risk reduction solutions at a geographic location. The LRA considers all threats whether they are financial, natural, political or human related. The LRA identifies and weighs the risks to business continuity based on a four-step process.
The four steps are:
1. Strategic risk assessment
2. Tactical risk assessment
3. Strategic and tactical risk assessment report
4. Project evaluation matrix
The purposes of performing the LRA are to:
– Determine if it is appropriate to do business in a specific geographic location,
– Identify probable threats to the business within the specific geographic location,
– Determine the financial exposure to the company should the probable threats occur, and
– Determine cost effective solutions to mitigate or minimize the risks.
The scope of the location risk assessment applies to all areas of the cable operator business that would impact operations based on locational considerations. Also, third party facilities such as co-location facilities, an LRA should be conducted.
These steps are guides for determining the overall risk assessment for a location. Depending on the
particular cable operator project all steps may not be required.
The information learned from the strategic, tactical and location risk assessments will be summarized by category on the strategic and tactical risk assessments report. Based on the narrative issues an overall rank will be determined and assigned for an overall risk assessment. The overall risk assessment rank and reason for ranking will be transferred to the project evaluation matrix.
1.2. Benefits
LRA provides a basis for an informed business continuity plan. Cable operator’s networks provide entertainment, communication and information services and therefore are a valuable asset to the community service it resides. Having a location risk assessment defined will enable cable operators make the best choices for planning how to mitigate threats that are location driven or dependent. Without a proper location risk assessment, recovery times during incidents could be prolonged and thus impact speeds at which the customer can resume use of services. Finally as an industry, cable operators will be more prepared in time of need based on location dependent concerns and ultimately aid in the improvement of customer satisfaction.
1.3. Intended
Audience Senior management of a business unit should initiate and sponsor the risk assessment and involve all key business units and stakeholders. Depending on the type of business risk assessment to be completed, the senior management of the business unit or location will assign project members to the risk assessment team. The strategic risk assessment team should be composed of representatives from the initiating business unit, and the finance and business development departments. Once the strategic risk assessment is completed and the project is determined viable to pursue, other groups may be brought in to complete the tactical risk assessments. The risk assessment team is responsible for completing the business risk assessment and making recommendations to the senior management of the business unit. The overall risk assessment becomes part of the decision matrix for approving the capital expense request.
1.4. Areas for Further Investigation or to be Added in Future Versions
Periodically the Federal Emergency Management Agency (FEMA) will redraw flood plain maps or insurance brokers and underwriters may update guidelines necessary for review under the LRA process. Crime statistics and zoning rules should also be reviewed. Development of a formal risk committee to address the comprehensive risk list as outlined in SCTE 206 2014 Cable Operator Business Continuity and Disaster Recovery Recommended Practices.
