IT problems, power outages, loss of mains water and failure of suppliers attract little media attention but nevertheless they cause significant disruption and financial loss to thousands of businesses each year.
Business Continuity Management can protect your organisation by mitigating these known risks as well as preparing for the unexpected. Business Continuity Management can also assist in creating a competitive advantage and providing reassurance to staff, investors and other stakeholders.
ISO22313: Security and Resilience – Business Continuity Management Systems – Guidance defines good practice based on the following “Elements of Business Continuity“.
As with any major project, objectives and timescales need to be identified, resources must be allocated and roles and responsibilities assigned to appropriate individuals.
The business impact analysis (BIA) identifies the critical activities of the organisation, quantifies the impact of not carrying out these activities and calculates the resources required to recover them in a timely fashion. Risk assessment identifies the risks to these critical activities and applies risk mitigation measures where appropriate.
The Business Continuity strategy captures how the organisation can most effectively maintain and/or recover its critical activities in the event of disruption and forms the basis for the development of detailed plans.
This element involves implementing any infrastructure changes, defining Incident Response structures and the writing of Incident Management and Business Recovery plans.
Exercises and rehearsals are vital to build confidence in the plan and to identify errors and omissions. It is also important to ensure that everyone in the organisation receives some basic BCM awareness training; and that those with specific responsibilities have more extensive training.
Cambridge Risk Solutions provides a range of services to assist with each stage of the Business Continuity Lifecycle. Alternatively, if you wish, you can outsource your entire Business Continuity Management function to us.
View some case studies of recent Business Continuity planning, training and exercising projects.