Three key questions CEOs need to ask

March 2015 Security Services & Risk Management

Many CEOs tend to see business continuity management purely within the context of complying with King III and other governance codes. But, says Leigh-Anne van As, business development manager at ContinuitySA, CEOs also need to see how business continuity management can help them answer three key strategic questions.

Van As argues that CEOs need to be able to answer ‘yes’ to these questions:

• Do you know which products and services offered by your company are vital to ensuring its strategic objectives can be met?

• Is your organisational structure aligned to the company’s strategic objectives?

• Do you know exactly which resources (including human resources) are required for the company to achieve its strategic objectives?

“Companies typically offer a multiplicity of products and services, but CEOs and their immediate teams need to understand which ones are absolutely vital to the company’s ability to meet its strategic targets. They also need to understand exactly which resources are essential to delivering those products and services,” she explains. “Once they have the answers, CEOs and their teams can allocate investment and attention appropriately, and optimise the company’s operations.”

Because companies often lose sight of what their core business actually is, they can find out too late that even a small disruption to a vital process can cause a major disruption to clients. Once lost, market share can be hard to regain – if at all.

“In the same vein, while every part of the business is important, not every part has the same time-sensitivity. Do CEOs properly understand the role each process plays in delivering the strategy, and how quickly, and in which sequence, each one has to be restored in the event of a disruption?” Van As asks.

CEOs also need to understand the company’s risk profile – some firms are more at risk than others. Factors here might be a high reliance on unionised labour, dependency on a single supplier, or even their location.

Those companies that don’t have the answers, or that are not confident of their correctness – and this is likely to be the case in a majority – can find/validate the necessary information from the business continuity management process.

“As part of putting a business continuity management plan in place, an initial strategic business impact analysis (BIA) should be undertaken. This helps leaders to understand very quickly the specific risks the company faces. The business impact analysis also includes a subsequent detailed analysis of how the various components of the organisation interact with each other, and their relative importance. It is even likely to identify and quantify the costs linked to failures, including lost profits. “

This kind of detailed understanding of how the company actually works, and the relative impact of the failure of each of its components, is not just useful in planning for disaster. It also provides vital information that can be used to improve the company’s normal operations and to give the CEO a three-dimensional view of how the company works.

“In short, the business continuity plan is more than insurance against disaster – it can play a key role in building, and communicating, a sounder picture of what’s important to a company’s long-term success, and help leaders formulate and implement strategy much more effectively. It can also help CEOs understand the industry context in which they are operating much better,” Van As concludes.

For more information contact ContinuitySA, +27 (0)11 554 8050, [email protected], www.continuitysa.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Keeping safety central to enterprise risk management
Zulu Consulting Security Services & Risk Management
[Sponsored] As employee safety becomes an ever-more critical aspect of corporate risk management, Risk-IO assists risk managers in ensuring a safe working environment, whether in an industrial setting, an office, or anywhere.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Strategies for combating insider threats
Information Security Security Services & Risk Management
In Africa, insider threats pose an increasingly significant risk to businesses, driven by economic uncertainty, labour disputes, and rapid digital transformation. These threats can arise from various sources, including disgruntled employees and compromised third-party service providers

Read more...
World-first safe K9 training for drug detection
Technews Publishing SMART Security Solutions Editor's Choice News & Events Security Services & Risk Management Government and Parastatal (Industry)
The Braveheart Bio-Dog Academy recently announced the results of its scientific research into training dogs to accurately detect drugs and explosives without harming either the dogs or their handlers.

Read more...
New firearms training modules from ITA
News & Events Security Services & Risk Management
The International Firearm Training Academy has launched two new firearms training modules to support career development in the firearms industry: the Maintenance Fitter and the Firearms Custodian modules.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Background checks: risk levels and compliance
iFacts Access Control & Identity Management Security Services & Risk Management
Conducting background checks is a vital step in the hiring process for employers or when engaging service providers; however, it is crucial to understand the legal framework and regulations governing these checks.

Read more...
On the ball or unaware
Technews Publishing Information Security Security Services & Risk Management
Whether an organisation is operating at a high level of information security maturity or has dangerous vulnerabilities that could put an entire business at risk, advanced, strategic penetration testing can uncover its true state of IT security.

Read more...
The bane of burnout
Editor's Choice Security Services & Risk Management
The World Economic Forum has recently formally acknowledged burnout as an occupational syndrome, giving it a status that is even more worthy of being taken seriously and resolved as quickly as possible.

Read more...
A winning combination for modern cybersecurity
Information Security Security Services & Risk Management
Companies are compelled to comply with legislative mandates and, more importantly, implement appropriate security measures for their customers and their most valuable asset – their data.

Read more...