What problem does it solve?
A cyberattack, a prolonged power outage, a fire or the sudden absence of key people can stop operations. Without a tested plan, decisions are improvised at the worst possible moment.
Who is it for?
- General management and risk committees
- Operations, IT and finance management
- Companies with processes critical to customers or the public
What risks does it address?
- Prolonged disruption of systems or facilities
- Data loss without a recoverable backup
- Dependence on a single supplier or key person
- Disorganized communication during the crisis
What's included?
- Business impact analysis (BIA)
- Definition of recovery time objectives
- Continuity and recovery strategies and plans
- Tabletop exercises with leadership
- Crisis communication plan
Business benefits
- Decisions prepared before the crisis
- Shorter downtime
- Confidence of customers, partners and regulators
Methodology
Understand
Business context, critical processes and risk appetite, with leadership.
Assess
Review of physical and digital controls and behaviors, with evidence.
Prioritize
Findings ranked by impact and effort, with owners.
Implement
Support with actions, procedures and training.
Measure and improve
Executive indicators and periodic review.
Scope, duration and the financial proposal are defined after an initial conversation, according to the size and needs of the organization.
Frequently asked questions
What is a tabletop exercise?
It is a guided simulation in which leadership and teams walk through a crisis scenario to validate roles, decisions and communication, without affecting operations.
Is continuity only for large companies?
No. An SME also needs to know what to do if it loses its invoicing system or its premises for several days. The plan is tailored to its size.