The need for effective and realistic business continuity measures is becoming vital as we become more aware of the risks of pandemics, theft, power outage, flood, fire and terrorist attacks. Addressing the technology aspects alone and implementing disaster recovery measures is not enough. Consideration needs to be given to the people, physical and information assets that are critical to the survival of the business in the event that our organisation is disrupted by an incident. Consequently, more organisations are exploring the benefits of implementing best practice business continuity management process and procedures following the guidelines in ISO 22301.
Advent IM has helped many organisations implement a robust business continuity management system. We have also developed and conducted realistic, scenario based testing and exercising plans to ensure that the business continuity plan would actually work if invoked. One of the biggest weaknesses we also find is organisations developing business continuity plans based on perceived rather than actual impacts and risks because they haven’t done the due diligence beforehand. Assessing impacts, threats and risks is vital to an effective business continuity management system.