BCM is best implemented as a phased program of work that follows a defined lifecycle:
BCM Lifecycle Initiation and Current Capability Assessment – highlights areas of weakness and strength in your program
Business Impact Analysis (BIA) – gain an accurate view of the business impact on specific critical business processes over defined time intervals following an event
Risk Assessment (RA) – gain a clear view of what your risks are, by focusing on a finite list of disaster scenario(s), and how to manage them effectively.
BCM Strategies - see what strategies you need to employ in order to meet the business recovery metrics for critical processes
BIA Report and Business Case - confidently and accurately set your business risk appetite level and gain the financial metrics around the costs and benefits of a particular risk control measure.
Business Continuity Plan (BCP) – see the whole business view on the disaster management command and control structure that will be used during a real disaster event, including the specific key business unit and task-by-task plan of what needs to happen to continue trading at an acceptable level throughout the disruption.
Crisis Management Plan (CMP) – know the framework within which a crisis or disaster event can be effectively managed and the impact (financial and non-financial) on the business reduced.
IT Services Continuity Management Plan (ITSCM) - a fit-for-purpose plan that ensures mission critical ICT services are restored in the correct priority order.
IT Disaster Recovery Plan (ITDR) – enables you to confidently and accurately allocate the IT budget according to the areas of the organisation’s IT infrastructure that need to be safeguarded the most.
BCP and ITDR Drills and Drill Report – gain an excellent view of your organisation’s levels of disaster preparedness with regular drills designed to ensure the effectiveness of the BC or ITDR plans.
BCM Program Management - meet a high level of good corporate governance, with respect to disaster preparedness and the management of risk.
Disaster Recovery Solutions vary widely depending on individual requirements, including:
Managed Hosting and Storage Solution – have a safe hosting environment, uninterruptible power, 24 x 7 monitoring, security and maintenance
Work Area Recovery Site Solution – know that key personnel will be able to maintain your critical business processes from an alternate site, and within the recovery metrics required by your business.