Business Continuity Management
What is Business Continuity Management?
Business Continuity Management (BCM) is an holistic management process that
• identifies potential impacts that threaten your charity,
• provides a framework for building resilience and the capability for an effective response that safeguards
- the interests of your beneficiaries and stakeholders,
- your charity's reputation & brand,
- your organisation's income-generating activities.
BCM must be owned and fully integrated into your organisation as an embedded management process.
Why is BCM becoming more important?
• Legislation and Regulations: the Civil Contingencies Act, FSA
• Experienced events: e.g. H1N1, Y2K, 9/11, 7/7, severe weather 2011, 2012, 2013
• Supply Chain Complexity: longer supply-chains, off-shore manufacturing, outsourcing of services
• Digital technology: greater reliance on i.t. and data
• Insurance: increasing requirement for evidence of bcm by insurance companies
• Corporate Governance: risk management requirements, trustees' concerns
• Stakeholder Concerns: protection your service-users
Risks - What are charities concerned about?
Implementing BCM in your organisation
How to start on BCM:
1. Discuss BCM at senior level and assign responsibility
2. Assess Risks: identify critical activities and key risks
3. Plan: work out how your organisation will maintain critical activities
4. Document your plans
5. Communicate: train staff and stakeholders, test your proposed responses
6. Maintain: keep your plan up-to-date
We asked our members to find out what their key concerns were. This table shows the results:
Documentation and Communication are vital!
Compiling a record of your business continuity plan is vital. If the worst happens, people need to know where to look for crucial information and what their next actions should be. Your business continuity plan could be as simple as a document that is distributed to key staff in hard copy and online.
A copy of your detailed business continuity plan
Contact details for all staff - including mobile phone numbers
Contact details for emergency contractors - e.g. plumbers, glaziers, emergency numbers for utilities
No matter how careful your analysis and planning, nothing serves to highlight core issues like running a test.
Guidance and Standards
The Government has prepared a Business Continuity Management Toolkit which you can use to get started. The link is here: https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/137994/Business_Continuity_Managment_Toolkit.pdf
(This is a 19 page pdf document.)
The British Standards Institute: ISO 22301 Business Continuity Management
ISO 22301 is the international standard for business continuity management. It builds on the previous British Standard, BS 25999, and other regional standards.
The Business Continuity Institute has a selection of resources on its website. The link is here:
In the USA the National Fire Protection Association has issued FPA 1600 Standard on Disaster/Emergency Management and Business Continuity Programs http://www.nfpa.org/assets/files/pdf/nfpa1600.pdf
Australia: Standards Australia: • HB 221-2004 – Business Continuity Management Handbook • HB 292-2006 – A practitioner’s guide to business continuity management • HB 293-2006 – Executive guide to business continuity management I.T.: BS ISO/IEC 17799:2005 Code of practice for information security management