The client imports medical testing equipment, and provides servicing for those instruments as well as critical reagents. Given the criticality of the products that they sell and the nature of their customers, many of whom are Category 1 Responders under the terms of the Civil Contingencies Act, the client decided that they needed to implement effective business continuity procedures.
Cambridge Risk Solutions were engaged to work with the client to develop a full Business Continuity Management System which would be compliant with ISO22301 and integrate with their existing management systems. This was complicated by the fact that the company operates to a centrally-held management system, external to the UK, the development of which was not in scope for the project. One of our consultants worked with the client to develop a business continuity management system which could operate alongside all existing management systems, but was also compliant with the Annex SL framework (http://www.irca.org/en-gb/resources/Guidance-notes/Annex-SL-previously-ISO-Guide-83/).
We worked with the client to develop a comprehensive Business Impact Analysis and Risk Assessment, which helped to prioritise the critical activities and to understand the relationship with key internal suppliers. We then developed a Business Continuity Plan and Incident Management Aide Memoires to assist with incident response, and this was followed up by the relevant training, testing and exercises.