Resilience

Whether you’re mandated by a regulator or insurer, or your clients and customers expect this, organisations need crisis management and / or business continuity plans in place. 

Depending on the size, nature and complexity of your organisation, we can help put in place practical and effective plans to enhance your resilience. 

We can also create and train your response teams, so the plans come to life, and everyone knows their role and responsibility during a disruption. 

The best way to assess and validate your crisis management and business continuity management plans and teams is to run them through an exercise (sometimes known as a ‘war game’). Exercises ensure you’re providing assurances to your organisation, clients, regulators and other relevant stakeholders your ability to withstand disruption and crisis. 

Our exercises will always be tailored to suit the maturity and experience of your team.

Our consultants have conducted exercises in over 50 countries. They are well versed in working with crisis management and business continuity teams with a range of experience, from total beginners to well-oiled machines. Irrespective of the maturity of the team, there is always something to learn and improve upon.

Many organisations need more than a plan and team to be able to respond effectively to a disruption. There needs to be an underpinning structure and a level of governance to ensure a consistent approach to your business continuity management.

We can help you define this structure and put in place the documentation and processes required to make your approach effective. 

If you are looking to certify to ISO 22301, having this structure, also known as a Business Continuity Management System (BCMS), is an essential requirement. We can ensure you are configuring your BCMS effectively and assist in achieving certification. 

As the pace of change accelerates, so does the nature of disruption. Organisations should review their plans, policies and related documentation on a regular basis, for example, following an incident or exercise. 

These reviews ensure you are doing everything to make your organisation as resilient as possible. We work with many organisations, so bring our experience, knowledge and independence to the process to highlight areas where you are doing well, and areas which can be improved. 

We can provide a report outlining our review findings and recommendations, which also serves as assurances for your stakeholders including regulators, insurers and clients or customers. 

Third party risk management is something all organisations must consider and in a world that is ever more interconnected, impacts on one organisation will have a ripple effect on many others.

Understanding how your suppliers will impact your business continuity strategies is essential. 

We can map your critical suppliers, understand your vulnerabilities and help you work collaboratively with them to ensure your business continuity strategies are aligned. Ultimately, a disruption with a critical supplier impacts your organisation and your ability to continue to operate. 

We recognise scheme continuity or business continuity as set out in the General Code, requires a specific and tailored approach. No two pension schemes are the same and the risks that apply to other organisations are often not relevant to the structure of a pension scheme. 

Given our vast experience in this sector, we have used our expertise and knowledge and created a practical and proportionate approach to business continuity, cyber risks and cyber incident response plans for schemes of all sizes and levels of complexity.