Re-imagining business continuity management

www.riskcentric.co.uk

Re-Imagining BCM

A Case StudyFinancial Products Trading Organisation

Pre- IPORegulatory AssessmentsInvestor Due Diligence

Where we started


What we needed• Focussed and relevant to the business

– Existing process had lost credibility

• Sustainable in operation• Enterprise wide• Actionable Intelligence

– Meaningful metrics


What we had to work with


What we focussed on….

Customer “touch points” Regulations

.


Does everyone need to do a BIA?


Fastrack BIA




PPM

IT Disaste

r Recovery

Overarching Strategies for Resilience & Continuity

• Information Systems• Workplace• People• Critical environments

Threat Protect Detect Respond Contingency (BCP)

Assure

Critical Environments

Information Systems

Workplace

Workforce


Critical EnvironmentsContinuous Assurance

• Factor into change management• Environmental proving


Proof of Resilience & Recovery

• Failover Testing• Critical Environment assurance/testing• Risk Assurance Schedule• Awareness management• “Traditional” exercises and confirmations


mailto:[email protected]?subject=Confirmation%20of%20Completing%20BCM%20Awareness%20traing

Process Resumption & Recovery

• Maintainable, “light touch” plans– Leadership team(s)– Priority Actions• Checklists

– Accommodation– Communications facilities



Metrics

Proof of Resilience

Culture & engagement

Confidence in Mobilisation Framework

Programme Integrity

mailto:[email protected]?subject=Confirmation%20of%20Completing%20BCM%20Awareness%20traing

Highlights

• Process Optimisation– BIA, focus on business priorities– Focus on resilience strategies– End to end

• Assurance– Meaningful metrics, based on capability

• Organisation– A steering group that:a) Represented the businessb) Understood what it was steering and where it was heading!!


Re-imagining business continuity management

Business