Business Continuity Consultancy
Every organisation, irrespective of size or sector, may face events which will severely disrupt its operations and even threaten its survival. These events can be anything from a failure of IT, a loss of key personnel, clients, suppliers or partners, the impact of a pandemic or cash flow/financial issues. The term ‘business continuity’ is used to describe the capability and resilience of an organisation to continue operating through, and after, disruptive events.
URM has a team of very experienced business continuity consultants who can assist your organisation to improve its business continuity capability and resilience. Our approach is heavily aligned with ISO 22301, the International Business Continuity Management Systems (BCMS) Standard and our goal is to assist your organisation to implement and maintain a BCMS which develops business continuity appropriate to the amount and type of impact that is acceptable to your organisation following a disruption.
It is important to note that no two management systems will be the same, due to differences in organisational and industry requirements, products and services provided, processes employed, size and structure of the organization, the requirements of interested parties and, in some cases, legal and regulatory obligations. Your BCMS needs to be tailored to, and reflect, your organisation, how you work, the terminology you use and be part of business as usual. We, at URM, are cognisant of these requirements and are dedicated to assisting you to identify, achieve and maintain your desired levels of business continuity.
Implementing ISO 22301
One of the key features of ISO 22301 is that it is business focused; it adopts a structured process to business continuity which starts with the identification of the organisation’s key products and services. Once identified, a business impact analysis (BIA) is conducted to identify the critical activities which support these products and services and their dependencies in the form of resources, other departments and third parties. The BIA, combined with a risk assessment to determine the likely incident and disruption scenarios, provides the firm foundation upon which a business continuity capability should be based. These activities represent the first and probably the most critical stage in the overall business continuity process and are followed by the determination of a business continuity strategy, developing a response including plans, exercising the plans, embedding business continuity in the organisation and implementing a maintenance and review process. The whole of the business continuity process needs encapsulating into a management system that ensures it is operating within a defined structure and remains up to date. Equally important is the ownership. Business continuity must be driven by the business and not IT, which is where many organisations assign the responsibility. IT has a key part to play and a significant contribution to make and should be closely involved, but experience has shown that business ownership Is vital.
Achieving an optimum BCMS
Achieving the optimum BCMS balance is where URM excels. We are able to ensure that you gain maximum benefit from implementing ISO 22301 by virtue of our experience of assisting organisations through certification, consultancy expertise (all experienced business continuity managers with real world experience and understanding of the challenges you face) and our purpose designed BIA and risk management software (Abriska). Our consultancy services come with the assurance that any implemented BCMS will be tailored, appropriate and sustainable. URM’s ISO 22301 consultancy services are also totally flexible and our consultants can provide guidance and knowledge transfer across all stages and activities, e.g. assisting with the business impact analysis, risk assessments, strategies, plans, exercising and embedding the BCMS in your organisation. Support will be tailored to your specific requirements, which are often influenced by your internal expertise and its availability, timescales and budgets. URM also has a team of highly skilled and experienced auditors.
Want to Learn More?
If you are looking to comply with, or certify to, ISO 22301, we can provide you with a number of free sources of practical advice. URM delivers half day ISO 22301 implementation seminars which provide real world insights on pitfalls to avoid, as well as hints and top tips for ensuring a successful outcome. The focus is on ‘how to certify’ and the contents of these seminars is based on the cumulative experiences of both URM and BSI implementing and assessing many business continuity management systems over the last 10 years.
In addition to attending free ISO 22301 seminars, you can also take advantage of URM’s free ISO 22301 health check. The half day health check is aimed at organisations which are seeking certification to ISO 22301 and are looking to benchmark what they currently have in place against the requirements of the Standard. Following the health check, which is delivered by our senior consultants, you will receive a high-level report and graph indicating the maturity of the key components of your BCMS. The health check is ideal for helping you to understand your current compliance status, where your development priorities lie and the likely timescales and resources you will require in order to achieve certification.
Other valuable source of free information from URM are our blogs, top tips and webinars where we often focus on a specific issue or requirement of ISO 22301 and provide our practical perspective on how this requirement can be most effectively satisfied.