|A company is
comprised of many departments, business processes and people, all of which
are aligned around the company’s strategic business plan and supports the
company’s objectives. The major
responsibility of the company’s management team is to assure the continuation
of the business by making a profit while providing cost effective services or
products for their customers.
Survivability is based on being innovative, flexible and providing
services or products that are valued by their customers.
Continuity Planning must follow the same principles. If you do not have agreement on what events
could disrupt the business or you do not provide services that are valued by
your customers, you will fail. For
Business Continuity Planning to be successful within a company, the Business
Continuity Planner must have agreement on what could disrupt the business and
then strategically align the business departments around accepted strategies
for minimizing business disruptions.
You must develop a Strategic Business Plan for safe guarding the
enterprise. This is accomplished through the BIA.
|Most companies have
many departments that evaluate and mitigate risks within a company. Some departments focus on the location
where work is performed. Other
departments focus on the work done in the locations. There are many departments within a company
that provide a service of identifying, evaluating and planning for events
that could significantly affect where and how work is done. Most of these departments are “uniquely
focused” on their own areas of expertise and seldom communicate with each
European Manager once blurting out to me, ”What is wrong with you, don’t
you guys talk to each other?” after he was visited by Security, then
Facilities, then Internal Audit, then Risk Management, and finally Business
Continuity. Each group came separately
to evaluate the new Distribution Center being built and had basically asked
him the same questions.
|That manger was
right! Most of these departments
seldom talk to each other, they have their own agendas, and risk mitigation
is not centrally planned within a company.
Rarely do these departments look at the same risks at the same time. In today’s’ environment, looking at company
risks in an independent and decentralized manner is ineffective and
|This is where
you can begin to add value by aligning key departments and individuals around
company issues associated with BCP.
Your job is to ID issues and align departments...be a “foster parent”