Difference between Risk Mitigation & Contingency Plan Every risk based on score, both Mitigation & Contingency plans are prepared Risk Mitigation Plan Risk Contingency Plan Planning of identifying actions which should take in advance irrespective of, risk is occurred or not. Plan actions and monitor through some certain warning signs. These actions are taken only the risk occurs. spend time and money in advance for the given risk condition Not spend time or money in advance, but keep them ready, and invest them when needed By applying a mitigation plan, chances of occurrences might reduce, risk score can reduce etc., Applying of contingency plan, will not change the probability or impact of the current risk, but plan to control the impact as risk event looks like occurring. This works as the first level of defense for the high exposure risks This works as a fallback plan for the high exposure risks.
Consultant for ISO 9001:2013 (QMS), ISO 27001:2013 (information security), ISO 27701-2019 (privacy & GDPR), ISO 45001:2018 (Safety & Health), ISO 13485 (medical devices), CMMi v1.3 DEV, CMMi v1.3 SVC, CMMi v2.0 and privacy acts like GDPR, COPPA, CCPA;-------------- Lead Auditor & Certified in-------- CMMi Assessor, IRCA ISMS Lead Auditor, BSI PIMS GDPR Certified Lead Auditor;-----Contact: baas.saras@gmail.com, Bangalore, Karnataka, India