BCM Tools
Measure Your Business Continuity?

Looking for a way to ‘measure’ your business continuity efforts?

In tough times, you may need to make the best case possible to continue to secure funding for your business continuity programme.  Senior management often value impartial measurements of the maturity of your programme to understand what the funding has achieved so far.  But how do you measure business continuity with any great accuracy?

ContinuitySA claim their business continuity maturity model offers an objective way to gauge your programme.

The model has twelve critical success factors:

  1. Executive support. Is there a business case and is it backed up with budget, policies and leadership commitment?
  2. Resources and expertise. Are they sufficient?
  3. Core enterprise threat assessment. What are the threats and single points of failure—and how are they managed and mitigated?
  4. Extended enterprise threat assessment. The same assessment made of the supply chain.
  5. Continuity strategies. What are the possible strategies for each of the resource dependencies, and which ones should be selected?
  6. Incident management framework. This should consist of strategic, tactical and operational activities with an appropriate infrastructure.
  7. Incident (emergency) response. Are the procedures, infrastructure and teams in place to protect your most valuable asset, your people?
  8. Reputation management. Are the procedures, infrastructure and teams in place to protect your next most valuable asset?
  9. Business continuity plans. Do they include an initial response, recovery plans and, ultimately, resumption of normal operations?
  10. Recovery infrastructure. Is it adequate, and is its own risk profile adequately managed?
  11. Testing. This is one of the most vital steps and one that companies struggle with the most.
  12. Assurance reviews and audits. These processes are necessary ultimately to drive a culture of continuous assessment.
Would this type of model help you, or is it too general?
We’d love to know what you think!
Was this useful?
Share it!
Subscribe - weekly news and a free course!

Related Articles


About Author


2 comments on “Measure Your Business Continuity?

  1. Steve Lambert on said:

    In your article ‘MEASURE YOUR BUSINESS CONTINUITY?’. I do think your comments are quite general. ISO 22301 certification does look at metrics and something a bit more specific would be really helpful.

    • Steve, ISO22301 requires you to have metrics, but doesn’t help by suggesting what those should be. This is the kind of grey area in standards that some of us find most unhelpful indeed.

Leave a Reply

Your email address will not be published. Required fields are marked *


50,947 Spam Comments Blocked so far by Spam Free Wordpress

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Get free weekly newsletter:
No spam guarantee.