Business Continuity Management
A comprehensive approach to business continuity, covering project initiation, risk assessment and business impact analysis, BC strategy and plan development, walkthrough testing, pre-certification, certificate audit handholding, and annual maintenance.
What this achieves.
Minimize the impact of disruptions
Substantially decreases the effect of disruptions on operations, services, and stakeholders.
Ensure business continuity
Maintains continuous availability of critical business functions and assets through a disaster or unexpected event.
Meet regulatory and international standards
Aligns the program with international frameworks such as ISO 22301, using a systematic and repeatable methodology.
Increase organizational resilience
Improves the organization's capacity to respond to disruptions and reduces the risk of sustained operational damage.
Improve decision-making and risk management
Establishes a structured approach for identifying, evaluating, and prioritizing operational threats and risks.
Eight phases, aligned to ISO 22301.
Initiation
Identify project scope and objectives, and define the responsible implementation team.
Establishing BCM Governance
Define team structure, roles, responsibilities, and reporting lines, and establish supporting policies and procedures.
Risk Assessment & Business Impact Analysis
Identify and evaluate potential threats, and determine the impact of disruption on operations and stakeholders.
BC Plans Development
Create detailed plans outlining restoration procedures for critical business operations during and after a disruption.
BCP Walkthrough Testing
Test the BC plans through walkthroughs to verify effectiveness and identify gaps.
Pre-certification Audit (Internal)
Conduct an internal audit confirming the BCM program's compliance with ISO 22301 and the completeness of BC plans.
Certificate Audit Handholding
Guide and support the organization through the formal certification audit.
Annual Maintenance Visits (Years 2 to 3)
Regular maintenance to keep the program current and support ongoing certification.
Where this connects.
Information Security Management
The ISO 27001 management system that BCM sits alongside, built through the same certification path.
Compliance
Where continuity requirements are imposed by a regulator rather than chosen, and have to be evidenced.
Third Party Risk Management
Continuity depends on vendors too. TPRM covers the ones your recovery plans assume will be available.