Business Continuity

An upward trending graph line behind the figure $4.99 million, representing the rising average cost of a data breach.

The Real Cost of a Breach Just Went Up Again — Here’s What the Number Doesn’t Tell You

IBM published its Cost of a Data Breach Report last month, and the headline figure is the one everyone will quote: the global average cost of a breach has hit a record $4.99 million, a 12% increase on last year. In the UK specifically, that average sits at around $4.27 million (£3.13 million). Numbers like […]

The Real Cost of a Breach Just Went Up Again — Here’s What the Number Doesn’t Tell You Read More »

Grey trackside cabinet with dozens of black signalling cables fanning out into cable troughs beside a curving railway junction on an overcast day

One Power Failure, Seven Train Operators Down: What That Tells Us About Dependency Mapping

This afternoon, a power failure at a communications centre brought major disruption to rail services across the Midlands and north-west England. Avanti West Coast, CrossCountry, East Midlands Railway, London Northwestern, Northern, TransPennine Express and Transport for Wales were all affected. Not one operator having a bad day. Seven, at once, because of a single point

One Power Failure, Seven Train Operators Down: What That Tells Us About Dependency Mapping Read More »

Yellow and black pipeline warning marker post in a grassy field with dry stone walls and Peak District hills behind, marking the route of the proposed Peak Cluster CO2 pipeline

Peak Cluster and the CO2 Pipeline: the business continuity conversation nobody’s having

There’s a proposal working its way through the planning system at the moment that deserves more attention from a business continuity perspective than it’s currently getting. Peak Cluster is a carbon capture and storage scheme that would take CO2 from cement and lime works in Derbyshire and Staffordshire and move it 120-odd miles by pipeline,

Peak Cluster and the CO2 Pipeline: the business continuity conversation nobody’s having Read More »

A small business leadership team of four reviews a recovery plan together around a meeting table, discussing priorities calmly and analytically

What the NCSC’s new incident recovery guidance gets right, and where it falls short

On 29 July, the NCSC published What To Do When Cyber-Attacks Disrupt Your Organisation, a detailed framework covering the first hours of a disruptive attack through to the months of rebuild that follow. It’s well timed. Attack volumes are up, and the guidance is clear-eyed about something many boards still underestimate: recovery from a serious

What the NCSC’s new incident recovery guidance gets right, and where it falls short Read More »

Covered walkway to the SEC, Hydro and Armadillo arenas in Glasgow, with green mould and slime staining the outer panels

What the Commonwealth Games Taught Me About Deploying Resource

I’ve been away for a week, which means the blog has been quiet and there is a genuinely biblical quantity of laundry currently taking over the house. The one thing keeping me cheerful through it has been the Commonwealth Games, which we went to see at Glasgow over the last six days. The Tollcross ticketing

What the Commonwealth Games Taught Me About Deploying Resource Read More »

A bound stack of aged manila case files tied with string, beside a pair of reading glasses, on a wooden desk

A 74-Year-Old Wreck Just Explained Why Your Safety Briefing Exists

A 74-Year-Old Wreck Just Explained Why Your Safety Briefing Exists Last month a sonar drone found the wreckage of a Pan American Airways aircraft two thousand feet down off Puerto Rico. The Clipper Endeavor had been missing since 11 April 1952, when it lost several engines shortly after take-off and went into the Atlantic with

A 74-Year-Old Wreck Just Explained Why Your Safety Briefing Exists Read More »

Mont Blanc and the French Alps, the destination behind a lesson in contingency planning

None of It Was Mine to Fix: What a Trip to the Alps Taught Me About Contingency Planning

None of It Was Mine to Fix: What a Trip to the Alps Taught Me About Contingency Planning I’ve just got back from a few days in the Alps, and the getting there and back was, in its own small way, a masterclass in exactly the thing I spend my working life advising other people

None of It Was Mine to Fix: What a Trip to the Alps Taught Me About Contingency Planning Read More »

Relay baton dropped mid-handover, illustrating a failed third-party contract handover

What the Sats Marking Crisis Tells Us About Third-Party Contract Handovers

What the Sats Marking Crisis Tells Us About Third-Party Contract Handovers Every July, Year 6 pupils across England find out how they did in their Sats. This year, a lot of schools found out how their exam board did instead, and the answer wasn’t good. Pearson took over the £180 million Sats marking contract from

What the Sats Marking Crisis Tells Us About Third-Party Contract Handovers Read More »

Fire extinguisher behind break glass panel in an office corridor — the emergency plan nobody reaches for

Your Business Continuity Plan Exists. So Why Did Nobody Use It?

In my experience, organisations that come to me for consultancy often share a similar story. They had a business continuity plan in place, sometimes one they had developed internally, sometimes one built by a previous consultant. Something went wrong, and nobody invoked it. Not because the disruption was trivial, but because nobody felt confident enough

Your Business Continuity Plan Exists. So Why Did Nobody Use It? Read More »