| Resilience
Capability |
| Whilst
the need for a resilience capability (a consolidated approach to risk
management, crisis management, business continuity management and
disaster recovery) is being increasingly recognised by business, the
strength and effectiveness of this capabilities often varies significantly.
By using a simple business driven approach, organisations can assure
the implementation and operation of their resilience capabilities. |
| |
| Business
Continuity Journal Vol 3 Issue 4 |
| Resilience Capability - Developing
Enterprise Capability. Published in the Business Continuity Journal
Vol 3 Issue 4. |
| The
Business Fundamentas are the Elements of Business in Tough Times
|
| Whether businesses have survived or
flourished in the recent Global Financial Crisis, some common issues
and themes are seen that can be applied to businesses in future tougher
climates. |
| Pragmatic
Business Takeaways from the Icelandic Volcanic Ash Events |
| While the impacts of the recent Icelandic
volcanic ash clouds are worked through, there are some pragmatic and
practical takeaways being seen which have wider business benefits. |
| Developing
Enterprise Capability |
| Developing an enterprise wide resilience
(risk management, crisis management, disaster recovery management
and business continuity management) capability is a core business
competency. Further details around the development of an enterprise
wide resilience capability are presented in this document. |
| Risk
Management |
| Development of a resilience capability
within a business requires a pragmatic business driven approach that
includes an identification of and management of the risks impacting
business. Whilst resilient risks are important to a business, it is
the capability of a business to sustain operations using an alternative
system (process, function or entity) whilst a recovery is implemented,
which is of importance for core business operations. Further details
around aspects of risk identification and management and business
sustainability are presented in this document. |
| Crisis
Management |
| The ability to manage a crisis and
to manage the business through a crisis is a core business competency.
Developing this capability requires strategy and planning. Ones developed
a plan needs review and testing. Although a plan is important to have
in a crisis, the real value lies in the planning process because planning
is about having infrastructure in place that can be used at time of
incident to respond as required to the individual circumstances. The
planning also drives the skilling, training and testing of staff and
provides a framework and a coordinated approach for managing a crisis.
Further details on aspects of crisis management and planning are presented
in this document. |
| Capability
Management |
| The managing of an enterprise wide
resilience capability includes the training, testing and skilling
of staff so that they are effective in managing a crisis. It is the
use of a testing regime to assure outcomes, reported by exceptions,
that often proves the most effective in developing, managing and maturing
a resilience capability. A minimum regime across the enterprise (risk
management, business sustainability, business management in a crisis,
crisis management and capability management), set against a scorecard
to ensure transparency, is a powerful tool within a resilience capability
for assuring the ability to manage a crisis. Further details around
the development and management of an enterprise wide resilience capability
are presented in this document. |
| Monitoring
and Reporting |
| The establishment, management and
maturity of an enterprise wide resilience capability requires that
a reporting and monitoring framework exists. This shouild include
governance, business owners and an audit function. Reporting should
cover the resilience capability, is the resilience capability and
the business sutainability commensurate with the risks the business
is exposed to and what are the icebergs impacting a business. Furthere
details are presented. |
| Disaster
Recovery - Reviewing the Value of Business Insurance |
| Disaster Recovery (DR) provides insurance
for business operations, particularly around Information Communication
Technology (ICT). Proven by the delivery of utility infrastructure
worldwide, a focus on naturally redundant systems, that can take up
capacity when required, rather than duplicating infrastructure that
is seldom used, may provide a more effective and cheaper insurance
for a business. |
| Critical
Business Analysis |
| Tools for a risk based approach to
identifiying critical business operations and dependencies. Use in
disaster recovery and business continuity. |
| Critical
Systems Analysis |
| Tools for identifying critical systems
impacted for key business areas. Use in disaster recovery and business
continuity. |
| |
