BCM Gap Analysis
Our extensive experience in providing professional services to organisations and identifying their Business Continuity Management (BCM) needs, has led us to conclude that while organisations often cite that they have a BCM capability, the reality is that the documentation is often outdated, incomplete, not exercised and probably not compliant with various regulatory requirements.
The key question that needs to be asked is whether the organisation can state with any real degree of certainty that they have the confidence to deal:
- with the Emergency Response aspects associated with a disaster irrespective of the nature of the disaster, and
- the ability to recover key business operations for business functions deemed to be critical.
Our vast experience shows that while organisations might consider that they have a BCM documentation set, it is quite often deficient in a number of different components and relying on such documentation might have catastrophic results should a disaster actually strike.
Our Gap Analysis offering is a comprehensive review of an organisation’s existing BCM documentation. Click here for an outline of the activities that are typically included.
Depending on the size and complexity of the organisation, a Gap Analysis review typically takes around 2-3 days to complete. **
The deliverable from the review is a Gap Analysis report that details the strengths, weaknesses, potential threats and a high level schedule to mitigate the gaps. To finalise the process, we will present the findings of the Gap Analysis to the organisation’s Executive Management for review and discussion.
For more details please contact us today on 03 9674 7274 or submit a contact form.
**To support the above process, our service offering includes undertaking a detailed review of the organisation’s BCM framework for adequacy and compliance in light of BCM best practices as underpinned by various standards including:
- Australian Standards - Business Continuity Management Handbook (HB292,293)
- International standards - Good Practice Guide from the Business Continuity Institute
- British Standards – Business Continuity Management (BS25999 Parts I and II)
- APRA’s Prudential Standard GPS222 (if applicable) or other associated regulatory requirements
- Australian Standards Risk Management Standard: AS4360: 2004