Business Continuity

Prepare and respond with a flexible, sustainable business continuity program.

Our risk advisory practice helps organizations achieve a sustainable business continuity management program with the flexibility and tools to prepare for and respond to major disruptions fluidly, maximizing security, integrity and availability of your IT investments.

Business continuity management services

Today’s organisations face a host of risks that can impact business processes and supporting technologies. These disruptions are costly – from revenue and productivity loss to customer loss and reputational harm. When these disruptions occur, timely recovery and restoration of business operations are critical. An integrated business continuity management (BCM) program – one built to adapt and respond to a complex and changing risk landscape – provides sustainable oversight, thoughtful preparation and rigorous tools to handle an unexpected crisis.

In addition to helping organisations establish and develop a comprehensive BCM program, our specialists also provide a full range of business continuity services.

Business continuity program assessment

  • Program initiation and management
  • Risk assessment
  • Business impact analysis (BIA)
  • Business continuity strategies
  • Incident response
  • Plan development and implementation
  • Awareness and training programs
  • Business continuity plan exercise, assessment and maintenance
  • Crisis communications
  • Coordination with external agencies

Disaster recovery plan audit or assessment

  • Agility and granularity
  • Alignment with recovery strategy/business continuity plan
  • Recovery and restoration procedures
  • Vendor/Cloud provider dependencies
  • Validation and testing
  • Plan maintenance
  • Primary and backup data centers
  • Plan maturity

Business continuity and enterprise risk management “after-action review”

Post-incident assessment including gap analysis:

  • Roles and responsibilities analysis
  • Decision-making, timeline and process analyses
  • Reporting and recommendations

Third-party, supply chain or other services

  • Internal audit – vendor management and supply chain
  • SOC for Supply Chain
  • Oversight reviews
  • Vendor and supply chain due diligence
  • Tabletop exercises (including cybersecurity)
  • Incident response exercise