The evolution of the business continuity lifecycle
‘Ongoing cycle of activity of the business continuity programme, that builds organisational resilience.’(BCI 2018: 7)
Steps in the BCM lifecycle
- Establishing a policy (see ISO 22313:2014 Clause 5.3)
- Defining the scope of the programme, for example, which activities, products, services, or locations will be included?
- Establishing governance
- Assigning roles and responsibilities
|Top management||Demonstrate commitment to the programme/management system, ensure that it is properly established, implemented and maintained, by ensuring that appropriate resources are allocated and that it is regularly reviewed (ISO 2014)|
|Business continuity manager||Design, implement and maintain a programme/management system that is appropriate to the internal and external context of the organisation and that is appropriate to the nature, scale and complexity of the organisation|
|Incident response personnel||Respond to an incident or crisis, in line with organisation policy and producers|
|Internal auditors||Planning, conducting and reporting on the programme/management system audits (ISO 2014)|
- Raising awareness
- Buy-in from interested parties
- Building skills and competency
Your taskCan you still see the PDCA model in this lifecycle? Where?In your own organisation (or organisations you have worked for in the past) what evidence of business continuity can you see and what practices highlighted in the lifecycle do you see being followed? What was your involvement?
ReferencesBCI (2018) Good Practice Guidelines 2018 Lite Edition [online] available from https://www.thebci.org/training-qualifications/gpg-lite-2018.html Engemann, K.J., Henderson, Douglas M, (2012) Business Continuity and Risk Management: Essentials of Organizational Resilience. Connecticut, USA: Rothstein Associates Inc. Hotchkiss, S. (2010) Business Continuity Management in Practice. Swindon, UK: BCS, the Chartered Institute for IT. ISO (2014) Societal Security-business Continuity Management Systems-requirements.BS EN ISO 22301:2014 International Organization for Standardization.
Business Continuity Management and Crisis Management: An Introduction
Our purpose is to transform access to education.
We offer a diverse selection of courses from leading universities and cultural institutions from around the world. These are delivered one step at a time, and are accessible on mobile, tablet and desktop, so you can fit learning around your life.
We believe learning should be an enjoyable, social experience, so our courses offer the opportunity to discuss what you’re learning with others as you go, helping you make fresh discoveries and form new ideas.
You can unlock new opportunities with unlimited access to hundreds of online short courses for a year by subscribing to our Unlimited package. Build your knowledge with top universities and organisations.