Business Continuity Management - the key to continuity
Business Continuity Management is about being prepared to cope with an event that makes the normal running of your business impossible. It is important to identify your recovery priorities and timescales, and think about what, if anything, is a tolerable period of disruption.
Resources required to achieve disaster recovery, both physical and human, need to be considered, and plans made for sourcing them - especially IT hardware.
Critical activities in the business need to be identified, the risks to them and impacts of their disruption need to be investigated across five key areas:
- Site
- People
- Technology
- Information and Data
- Key Suppliers
This then allows the production of a comprehensive Risk Assessment and Business Impact Analysis, quantifying the exposures of the business operations. Risks can be considered using the ‘4T’ model – Treat / Tolerate / Terminate / Transfer.
A Business Continuity Plan can then be formulated. This should include Incident Management procedures, and short, medium and long term Business Continuity actions. Responsibilities are allocated to teams (the Gold / Silver / Bronze structure used by the emergency services is useful here), over a defined timeline.
Business Continuity then needs to be embedded in an organisation through training and awareness, with the plan regularly updated and tested to keep the arrangements fresh in the minds of those involved.

