Discover the 5 elements of a successful Business Continuity management.

Boris Agranovich

This article is part of the series "Popular Risk Management". The aim of the series is to describe the main risk management topics in simple, clear and concise language. To stay updated on the recent trends, please make sure to check out our Risk Management Show podcast on the major podcast apps or via the following link:

During the last 3 years the economies and companies operate in a crisis environment. Many observers even predict that our society is in some stage of the total collapse of the capitalistic system. This article won’t provide a solution for the global issues, but it describes how to establish a solid Business continuity framework that will navigate your organization in case of emergency. What elements and tools are vital for the solid and successful Business Continuity plan? 

Element 1: Set up a solid BCM Programme Management structure

Programme management is at the centre of the BCM process and it establishes the approach to business continuity. The participation of top management is of key importance to ensuring that the BCM process is correctly introduced, adequately supported and established as part of the company’s culture. Programme management includes three steps:

·  Assigning  Roles and  Responsibilities  (Governance)

Business unit management is ultimately responsible for the continuity of the business under adverse circumstances and accountable to ensure appropriate processes are implemented in the business unit.

Business unit management must appoint a person with appropriate seniority and authority to be accountable for BCM policy and implementation.

Business unit management must appoint a team to implement and maintain a BCM programme.

·  Implementing Business Continuity in the organisation by communication of the BCM programme to stakeholders, arrangement of appropriate training for staff and exercising of the business continuity capability

·  On-going Management activities must ensure that business continuity is embedded in the organisation. Each component and process of the business unit’s capability must be regularly reviewed, tested and updated.

Element 2: Understand your organisation.

The aim of this phase is to establish an understanding of the business through the identification of its key products, services, critical activities and resources that support them. The key activities during this phase are: Business Continuity Risk Assessment, Business Impact Analysis and determination of continuity requirements.

Element 3: Determine BCM Strategy

As a result of the previous analysis, the business unit will be able to choose the appropriate continuity strategies to enable it to meet its recovery objectives.

The following items must be included as part of the strategy:

  • Staff

  • Premises (alternative working arrangements)

  • Technology

  • Information

  • Suppliers

  • Stakeholders

You have to answer the following questions per critical process: how likely is it that a critical asset or process will fail and what are the consequences.  

Element 4: Develop and Implement a BCM Response

This phase of the lifecycle is concerned with the development and implementation of appropriate plans and arrangements to ensure continuity of critical and other activities and the management of an incident. An Event/Incident/Crisis (E/I/C) response structure and plan must be documented and in place to enable an effective response and recovery from disruption. Such response plans include Business Continuity Plans, Technology Recovery Plans and Crisis Management Plans.   

Element 5: Test, Maintain, Audit and Review BCM Arrangements

This phase ensures that the BCM arrangements are validated, that documentation is a reflection of the current business environment and that the plans are up to date. Key activities are:

  • Testing and exercising Business Continuity Plans including Call Trees and Crisis Management Plans.

  • Maintenance of Business Continuity Plans (and all BCM documentation match current business requirements).

  • Review of, and adherence to BCM Policies & Standards.

Element 6: Embed BCM in your organisation.

This phase focuses on the need for business continuity to become part of the regular management effort, regardless of the size or type of Business Unit. Development of a BCM culture is supported by:

  • Leadership from management at all levels.

  • Assignment of BCM responsibilities.

  • BCM Awareness raising.

  • BCM Skills training.

  • Exercising Business Continuity Plans and Crisis Management Plans.

  • Ensuring that Business Continuity requirements are included in strategic and investment decision-making.

Effective Business Continuity Management strives to:

  • Protect staff and shareholder interests.

  • Continue operations/services and minimise impact of disruption.

  • Adhere to Legal and Regulatory requirements.

  • Maintain company’s reputation.

  • Embed BCM in business activities.

This is achieved through:

  • Identification and analysis of business continuity risks.

  • Assessing the impact of the disruption of business critical processes.

  • Formulating a BCM strategy for the recovery of operations.

  • Timely and effective crisis management.


1.      High-level principles for business continuity, Basel Committee.

2.      BS25999 Business Continuity Management, Code of practice (British Standards Institute).


Is your business need a Business Continuity Plan, but you have never had the resources or expertise to create one? Do you already have a business continuity plan? Perhaps it's out of date and you're not sure it contains the right information? 

We at the GlobalRisk Community have just literally scratched the surface of what you can achieve. We analyzed dozens of best practices, policies and procedures of both leading financial institutions and corporates and we created the GRC Business Continuity toolkit. 

GRC Business Continuity Tool Box empowers you to plan for any crisis.

Included in the tool kit:

* A Business Impact Analysis questionnaire. 11 pages
* BCP template. 20 pages
* BCRA questionnaire. 6 pages
* BIA for corporates. 4 pages
* BIA procedures. 8 pages
* BC Risk analysis template. 2 pages
* Crisis management plan. 10 pages
* Sample vulnerabilities chart. A complete scoring methodology
* Technology recovery assessment. 5 pages
* Technology recovery plan. 13 pages
* BC glossary. 13 pages


Zero Risk - 100% Satisfaction Guarantee!

You have absolutely nothing to lose because this package comes with a full Money Back Guarantee.
If you don't like what you get and if you're not 100% satisfied, you can get every penny back. You've got a full 30-days to decide.
But this offer is limited, so CLICK the link below to get to the offer page.