ResilienceService
Business Continuity Management
Business Continuity Management (BCM) ensures that organizations can operate during disruptions and recover quickly from adverse events. A robust BCM system protects critical processes, people and reputation when normal operations are not available.
—Overview
Most continuity plans have never been tested against a scenario that actually stresses them. They assume the building is unavailable but the people are fine, or that the systems fail but the third party running them does not.
We build continuity capability from a business impact analysis that establishes what genuinely cannot stop, and for how long. Everything else — strategies, plans, testing, crisis structure — follows from that. Then we test it properly, including the scenarios people would rather not rehearse.
—What this covers
- 01
Business impact analysis
Critical process identification, recovery time and recovery point objectives, dependency mapping across people, systems, premises, suppliers and data.
- 02
Continuity strategy and planning
Recovery strategies proportionate to the impact tolerance, and continuity plans written to be usable under pressure rather than to satisfy a document review.
- 03
Crisis management and incident response
Crisis team structure, escalation criteria, decision authority during disruption, and internal and external communications protocols.
- 04
Exercising and testing
Tabletop exercises, functional tests and full simulations, with an honest post-exercise report on what did not work.
- 05
Third-party and supply chain resilience
Continuity assurance over critical outsourced providers, including exit and substitution planning.
- 06
Operational resilience alignment
Mapping important business services end to end and setting impact tolerances, in line with the direction supervisory expectations are moving.
—How we can help
What a full engagement typically produces. Scope is agreed up front and adjusted to what your organisation actually needs.
- Business impact analysis report
- BCM policy and governance structure
- Recovery strategies and continuity plans
- Crisis management and communications plan
- Exercise scenarios and post-exercise reports
- Third-party resilience assessment
- Awareness and training programme
- Maintenance and review calendar
—Standards and frameworks
Work is delivered against recognised standards so that findings are defensible to your auditors, your board and your regulator.
—Questions we get asked
—Related
Often delivered alongside
Talk to us about business continuity management.
Tell us what you are trying to resolve. We will tell you honestly whether we are the right firm for it.