Please login or join to subscribe to this thread
There is quite a lot of information available online from standards organizations - NIST, comes to mind.
The one thing I found a bit perplexing is your statement "to assist our client base". While this is a laudable goal, it is not usually part of your BCM strategy. Your focus should be on your business' continuity.
You should then help out your clients prepare their BCM strategy.
A part of our business is to provide support to clients with regards to their issues, queries and concerns with our products and services.
I was in charge of this type of initiative in my actual work place. My recomendation is taking a look to this: https://www.thebci.org/knowledge/introduct...continuity.html
I agree with Stephane on this. BCM is around keeping your business running in the case of a variety of problems from Pandemics to building closures etc.
The other part of this for your business is disaster recovery like earthquakes, floods that stop you doing things.
BCM can dictate having a standby site that people can move to and still operate, contract staff in the case of pandemics. Where disaster recovery may define a second fully staffed site sharing the load and will allow 80% of the other sites role to be managed should either of them go down.
2 views, different cost benefits and all with the aim of serving your customer base.
I agree with Stephan and Gordon.
We actually experienced a devastating fire at one of our office buildings a few years back where I worked. After three years of turmoil, it was finally decided to abandon the building. There was a BCM plan. It was reviewed and approved by senior leadership. After the fire, they dusted it off and read it. The plan was to permit essential personnel to work from home. That was it. No other details. No plan for non-essential personnel and no IT equipment for those that were determined essential to allow them to work form home. What ever you come up with, like most things in life, the devil is in the details. Think things through. In today's connected world, having essential IT services in place after a disaster is critical, amongst other details, like office space, transition plan, transition budget, clear roles, responsibilities, and accountabilities, etc.
Like all strategies, a BCM strategy needs to define a set of goals or objectives for BCM and then a plan can be developed to achieve those.
Sometimes this is driven by contractual obligations to your clients whereas other times it might be driven by regulatory requirements.
We actually came up with the same initial/interim solution while trying to come up with a more comprehensive solution. We are now evaluating the risks.
Awesome! Thanks Gordon! :)
Please login or join to reply