Common Industry Challenges
Business Continuity Planning is a plan to recover business operations after critical services have been stopped. While a Disaster Recovery Plan is to recover IT operations after an “IT Disaster”. These programs are reactive planning for “worst case” scenarios. Traditional thinking is that these programs will recover from any event that is less than “worst case”. Actual experience and post-event analysis has proven otherwise. The most frequent events are not “worst case” events. Instead, they cause interruptions to business services and have a negative impact. But they are not handled by most BCP and DRP planning approaches. In addition, to invoke the BCP or the DRP is a difficult decision. Given the impact in terms of cost and the disruption to other operations, valuable recovery time is lost deciding what to do. This delay can increase the negative impact of the event. This can mean significant revenue loss, impact to customers, clients, suppliers, staff and the public as well as damage to image or reputation, bankruptcy, and in worst cases, exposure to liabilities. Since recovery from IT interruptions is the responsibility of IT, a common assumption is that there is nothing that the business can do until “the screens light up again”. Consequently, not enough effort is made to focus on maintaining business operations, a responsibility that cannot be performed by IT. A Service Continuity Management (SCM) program will reduce the impact (cost) of an interruption. facilitates interim operations and speeds the return to normal operation. A damaged reputation can be expensive to the business and public loss of confidence in your services can be even more damaging. Rebuliding company's reputation can be expensive in time and money. Few organizations are ready or prepared when the interruption occurs. More than the recovery of the operation; it is the recovery of the business. An SCM program provides a reasoned response to all severities of interruptions which insures that if the “worst case” does occur, reaction and response will be better managed and the impact reduced. Compliance and audit standards (e.g. SOX, CoBIT, ISO, Bill 198) requires that the ability to survive risks that threaten the organization’s survival are planned, practiced and continually tested. |