Qra

SBA Scenario Tool for quantitative risk analysis

Identifying and evaluating risks is a business-critical activity that is always on the operations’ agenda and is integrated with product, system, business and operation development. Often, different types of investment decisions are based on the results of risk analyses, which means that the method and assumptions on which the analysis was made are critical. You have the complete solution to these concerns in SBA Scenario. SBA Scenario provides a secure basis for decision – offering financially motivated security Corporate security is always based on ensuring that assets, development, production and finance are resonably well protected against interruptions, damages and loss. SBA Scenario is a tool that helps you evaluate business risks methodically through quantitative risk analysis. The program also helps you evaluate which actions are correct and financially motivated – through risk management.

The scenario technique as a method – the creative process Since 1983, the scenario technique has been successfully used as a manual SBA method for analysing security deficiencies quickly at a reasonable cost. This effective method is based on the knowledge and experience of the companys employees. Brainstorming and free formulation of possible scenarios gets

SBA SCENARIO © 2002 Swedish Information Processing Society

the participants involved. SBA Scenario is based on the scenario technique to form a powerful computerised tool for risk analysis and management.

Who should use SBA Scenario? If you are a security co-ordinator, security manager, information security manager, IT manager in charge of security, project manager or security consultant, SBA Scenario is your indispensable tool. With your experience in security issues and SBA Scenario’s method support, you can perform risk analyses that always increase return on your investment. SBA Scenario – risk analysis for the optimal decisions support

Working with SBA Scenario SBA Scenario is a tool for professionals who work with security issues and risk analyses. As the analysis manager, you use SBA Scenario to methodically manage risks anywhere in the operations. The figure to the right shows a rough description of working with SBA Scenario. The tool can be applied to each process – except for the creative process.

Scalable and situational tool The need for risk analysis varies depending on the nature of the problems and the operation’s situation. This also affects what method you should use. Some cases require a detailed financial analysis, while others require a quick, general analysis. SBA Scenario lets you determine the degree of detail and precision.

Graphical user interface:

Choose between three types of risk analysis:

Risk analysis and risk management, are performed for each scenario

• • •

Main Analysis – Complete analysis with probability and costs specified as numerical values. Ten Analysis – Fast analysis where probability and costs are specified on a scale of 1–10. Risk Window – Fast, general analysis on a 4-level verbal scale.

These images show the consequence evaluation and priority of a scenario

SBA Scenario – product facts Graphical user interface (GUI) The steps of working are presented and activated in a pure graphical user interface Quantification and evaluation of problems by risk analysis Option of customizing impact sheets with templates for various lines of business, enterprises ond operations Justification and prioritization of measures by risk management Possibility of selecting measures for cost-effectiveness Based on the scenario technique – the creative process The scenario method identifies known and hidden problems SBA Scenario is easily customised Create business-specific reports using templates and manage them directly in your word processor Result guarantee If you select the right participants for the SBA Scenario analysis, you consistently achieve qualitative results SBA Scenario is continually being developed in consultation with users of the tool The Swedish Information Processing Society provides training in method and tool use SBA Scenario is available in English and Swedish SBA Scenario was developed jointly by The Swedish Information Processing Society and Informatic Konsult AB.

Swedish Information Processing Society, SBA. Box 451 53, 104 30 Stockholm, Sweden. Phone: +46 8 506 404 00 Fax: +46 8 506 404 15, e-mail: [email protected] www.dfs.se/products/sba