What is Business Continuity?
Business Continuity is building and improving resilience in your business, it identifies your key products and services and the most urgent activities that underpin them. This includes devising plans and strategies, that will enable you to continue your business operations, and enable you to recover quickly and effectively from any type disruption whatever its size or cause. Providing you a solid framework to lean on in times of crisis and maintains stability and security. In fact, embedding BC into your business is proven to bring business benefits.
BP Associates is one of the leading providers of consultancy in Business Continuity Management (BCM), Crisis Management, Disaster Recovery, Emergency Preparedness and Risk Management.
We will assist you in designing a holistic management process, that identifies potential threats to your organisation and the impacts to business operations those threats, if realised, might cause, and which provides a framework for building organisational resilience with the capability of an effective response that safeguards interests of your key stakeholders, reputation, brand and value-creating activities.
BP Associates can support you to reduce your exposure, working with you and your insurance provider to plan and implement risk management strategies which help reduce the impact of an incident.
You will gain world class BCMS solutions and training, internationally-recognised certification (ISO 22301) processes of preparedness and resilience to disasters or any business interruptions.
Our mission is to promote and empower professionals and organisations with the appropriate skills, and knowledge to help strengthen their management systems and enhance operational excellence in the business processes.
This is achieved through:
- Assessment – we will carry out a critical analysis of your essential processes
- Awareness – we will establish a compressive awareness program
- Training – we will deliver table top exercises, what if exercise & workshops
- Policy – we will develop a mission statement, strategic aim, BCMS objectives and scope
- Consulting – we will design, implement & validate your systems
- Incident Response Structure/Plan – your plan will mirror the emergency services
- Audit and Assurance – we carry out quality audits of your BCMS
- International Certification (ISO 22301) – we will assist you in achieving the ISO standard
- Set new standards in the Corporate Sector – develop robust plans and procedures
- Proactive Risk Management – we will design a specific risk register & mitigation plans
- Mitigate threats that could disrupt critical business activity – we will carry out an business impact analysis & 6 monthly audits
- Provide strategic direction – we will provide vision, objectives & professional advice on all Business Continuity Management Systems
- Continually Improve – we will ensure your BCMS continually improves
- Empowerment – we will give your staff the ability to respond to an emergency or incident
- Understanding what is critical – we will assess the impact to specific functions provided by critical services
- We will assist you in establishing a national Business Continuity and Major Incident programme from the Board
- Business resilience – we will build a culture of resilience thinking in your business
- Collaboration – we will share common goals to meet our objectives
We will assist you –
- Produce a business impact analysis (BIA) assessing what services should be provided as set out in the lease and recovery times. The services will be prioritised and a risk assessment conducted against each service line, operational risks will be tracked on the risk register
- Design, implement, test, exercise and validate standards, procedures and policies which control the Business Continuity Management System
- Maintain the risk register that includes operational and strategic risk
- Operate one set of performance metrics, that link to each in scope
- Operate one actions and continual improvement register
- Operate one standard business continuity roles and responsibilities
- Operate one standard communications procedure
- Produce a combined business continuity / emergency response plan that incorporates service / department providers
- Host a regular six monthly table top for all in scope properties
- Conduct 3 monthly what if exercises
Incident Response Plan
We will design and implement various procedures which will detail the various escalating strategic and tactical emergency response arrangements, and will link into your organisations Emergency procedures and business continuity plans. These procedures will provide a framework to protect your business and the assets, in responding to and recovering from a major incident or emergency.
We will assist you –
- To formulate a response and recovery strategy
- To formulate a client and investors reassurance strategy
- To formulate a communications and media strategy
- To consider and if necessary provide a response to issues arising during the incident / crisis
- To consider the impact on the location, organisation, individuals and external parties
- To identify corporate risks and learning issues
Emergency Preparedness Procedures
We will assist you in designing, developing and implementing documents to ensure your plans and procedures are in place, reviewed regularly and tested. Examples of such possible emergencies are; Fire, Major Accident, Full or partial Power Failure, Bomb Alert, Terrorist Activity, Loss of Utilities, Flood, Security Alert, Major Incident.
Incident Aide Memoire
We will design an emergency response aide memoire, which will support your operational manager’s respond to and recover from emergencies or major incidents
Maintaining Your Operations
BP Associates will assist you in designing and developing various strategies to utilise in high pressure situations when people are under stress.
- What is the minimum level of people resource you need to maintain your operation?
- Can you achieve it with your workforce this year compared to last year?
- Do you need to put in place any measures to make this achievable, such as temporary accommodation arrangements, subsistence allowance, enhanced earnings or bonus arrangements for staff that perform “over and above”?
- Do you have contact details for suppliers/supporters of these services in the event you need to get hold of them?
Access To The Site
How do you react to denial of access to your premises?
If site access, both for vehicles and people creates hazards, is there anything you can do to remove or reduce the hazards that can be prepared in advance?
If your business premises is within the emergency service cordon, how do you inform your staff?
Remote Working Capability
Have you tested plans to allow parts of your business work remotely?
- Do you know that your systems will cope with a wide scale remote access?
- Does everyone have the necessary access to and passwords for systems they made need to access?
- Does everyone have instructions of what to do and how to logon/access company systems remotely?
Managing The Workforce
We can assist in developing various strategies e.g. weather, communication, and transport.
- If weather conditions make getting to and from work hazardous
- If you need to communicate with the workforce how do you
- Trade Union action
- Travel disruptions
We will develop a recovery strategy which will link into your BCMS strategic objectives and business objectives. Recovery is an integral part of the incident management process. It can be defined as, “The process of rebuilding, restoring and rehabilitating the organisation following an incident.”
Stand Down Procedures
As and when it is clear that the incident / emergency phase is winding down, and recovery can be placed into business as normal processes, initiating the standing down of the emergency response plans.
We will embed a debrief process as soon after the incident / emergency as possible in order to identify issues and lessons learned for the emergency response.
Exercise, Training, Awareness & Validation
We will design and implement a compressive testing, exercising, and awareness programme. This will be achieved by utilising our build, verify and track readiness programme.
Our aim is to ensure all staff undertaking roles within the BCMS will receive regular training on their roles. This plan will be exercised annually in accordance with the requirements under the Civil Contingencies Act.
The purpose of these exercises is to quickly review your organisational “resilience”. This means your organisation’s ability to “recover from change or misfortune” to quote one definition.
Six monthly table top exercises – We will deliver large scale exercises covering worst case scenario topics.
Monthly what if/scenario testing – We will give your Manager the skills to deliver informal tests based on realistic topics that occur on a regular basis.
Table Top Exercises – example – Prepare for an increase in the threat level
- Understand current security context
- Validate move to critical plans
- Test Bronze operational aspects
- Scenarios to test plans and processes
- Discover planning gaps
Business Continuity Awareness Training
Everyone in the organisation must receive some very basic Business Continuity training if the programme is to be truly effective. This can be included as part of employee induction and reinforced by periodic reminders via email and/or intranet.
- The existence of a Business Continuity plan and Incident Management Teams
- Summary of any relevant elements of the plan (e.g. location of disaster recovery site)
- Instructions on what action to take if denied access to the workplace
Business Continuity Management Training
Business Continuity Coordinators, and others within the organisation who have responsibility for maintaining plans, will require additional training in order to fulfil their roles effectively. This will consist of 1 or 2 days of training initially and an annual half-day refresher.
We will provide template’s and tools to effectively manage your risks, also Identification of risks, including those associated with normal operating conditions, abnormal conditions, including start-up and shut-down, emergency situations, accidents and adjacency risks from 3rd parties.
- Context & Objectives – we will list the BC objectives, scope the context for risk management, and identify stakeholders.
- Risk Register – We will assist you in documenting the identification, analysis & evaluation, treatment and monitoring of risks.
- Identification – Provides examples of risks that are typical too small, midsize to large firms.
- Assessment Likelihood – we will develop an assessment criteria for rating the likelihood, or probability, of a risk event occurring.
- Assessment Consequence – we will design and implement an assessment criteria for rating the consequence, or impact, if a risk event occurs.
- Rating Matrix – Lists risk ratings based on the assessed likelihood and consequence.
- Assessment Controls – Lists the assessment criteria to rate the effectiveness of existing controls within your firm.
- Treatments – We will produce a lists the options available for treating risks.
Supply Chain Continuity Management
Our approach is broken into five stages which align with the requirements of ISO 22301 which ensures that Supply Chain Continuity Management (SCCM) can be managed within an implemented Business Continuity Management programme. Policy and plan which considers the requirement for supply chain continuity and the parameters each organisation should define to frame its approach to SCCM.
- Analysis of the supply chain which draws upon the organisation’s BIA to identify critical activities or processes and focusses on identifying the particular risks and impacts to these processes arising from disruption in the associated supply chain.
- Consideration of appropriate and achievable Supply Chain Continuity strategies which can help to mitigate the emerging risks and identify an approach to manage disruption.
- Planning to manage a supply chain disruption event and the requirement to integrate this with BC plans.
- Ongoing performance management to maintain an appropriate level of continuity management within the supply chain and deliver continuous improvement.
Effective SCCM generates its own challenges for an organisation, it may impact procurement strategies as continuity requirements may be contrary to strategies of minimising supply chain cost. The process of analysis should bring a focus onto the pressure points, for example where a critical process is dependent on a single supplier, and allow the associated risk to the organisation to be recognised and managed.