1. 1
From
Business Continuity Management
To
Business Resiliency

2. 2
Introduction
John Bolton CBCP
AXA UK Group Business Continuity & Crisis Manager
BC Manager for 18 Years
Worked and Consulted UK, USA and Europe on all
aspects of business continuity and incident planning
Experienced in Crisis Management
This presentation represents my personal views

3. 3
Agenda
Background
Quick history lesson
Business Resilience
A definition
Drivers for change
Who is responsible for Business Resilience
Questions

4. 4
Background
Quick History Lesson
Disaster Recovery [DR]
- Driven by IT departments
- Based upon the capability of the IT recovery
RECOVER from impact
Business Continuity Management [BCM]
- Business ownership
- Strategies based upon Business Impact Analysis and risk assessments
- IT DR [ITSCM] provide a support role
PREPARE & PROTECT from impact
Business Resilience [BR]?
?

5. 5
Business Resilience
Wikipedia defines business resilience as
‘the positive ability of a system or company to adapt itself to the
consequences of a catastrophic failure’
bci [dictionary of BCM terms] defines resilience as
‘The ability of an organization to anticipate, absorb, respond to and
possibly profit from the impact of unexpected events and impacts’
Business Resilience [BR]
PREVENT Impact

6. 6
Drivers for change
Drivers for change
Are there any?
If there are any, how applicable are they to your business
The ‘Headline’ message
Resilience, the inference here is that the business set up not to fail
Whereas Business Continuity infers that you have to do something to
continue your business
In practice
Cost and efficiency drivers [Economic Factors]
- Mergers/Acquisitions and Consolidations
Resilient systems will lessen the risk to your business
Looking at IT
- A server feed from duel power supplies
- A load balanced mirrored data center with replication
But to be fully resilient a business needs to go beyond the typical IT service
resilience and look at all aspects of its business

7. 7
Beyond IT Resilience
Staff
Multi skilled
Location non-dependent workforce
Flexible
Supply chain
Diversity of suppliers
No single points of failure
Premises
Locations and numbers of offices
Services to each property
Security of the premises
Multinationals
Common:
- systems/processes/procedures
Diversifications of Markets
Reducing exposure to certain markets and spreading risk

8. 8
Who is responsible?
If we accept BCM is morphing into Business Resilience
It must be the Business Continuity Teams!
Or is it a new owner?
…and if so are the days of business continuity teams over?
Business Resilience is part of corporate governance
Hence
Everyone is responsible to contribute to business resilience

9. 9
Key stakeholders
IT departments
Risk
Security
Health & Safety
Facilities
Fraud
Compliance
Controls
And
Business Continuity

10. 10
Last thought
Business Continuity Management [BCM]
A holistic management process that identifies potential threats to an
organization and the impacts to the business operations that those
threats – if realized – might cause, and which provides a framework
for building organizational resilience with the capability for an
effective response that safeguards the interests of its key
stakeholders, reputation, brand, and value-creating activities
My conclusion
Business Resilience is an important part of your BCM programme
But it is not new, it’s a name change to give the illusion of new!
for building organizational resilience
framework

11. 11