Whether you are starting from nothing or formalising existing arrangements, ADVOX helps you establish a BCMS that works in practice and stands up to audit, through consulting support, training, or both.
Establishing a BCMS means putting in place the leadership, structure, processes and documentation an organisation needs to keep its critical activities running through disruption, and to keep that capability current over time. It is the first Professional Practice in the BCI Good Practice Guidelines (GPG 7.0), and the foundation of ISO 22301:2019 and UAE NCEMA 7000.
Secure top management sponsorship, appoint an accountable owner and agree why the organisation needs a BCMS.
Understand the organisation, its interested parties and legal and regulatory requirements, and set the scope of the BCMS.
Publish a BC policy and measurable objectives, and define roles, responsibilities and authorities.
Carry out business impact analysis and risk assessment to identify priority activities, dependencies and recovery objectives.
Select continuity strategies and solutions, and put incident response, crisis management and BC plans in place.
Exercise the plans, measure performance, run internal audit and management review, and act on the lessons.
ADVOX works alongside your team to design and set up the BCMS: scope, policy, governance, BIA and risk assessment, strategies, plans and the exercise programme. See BCMS Framework Design and BCMS Project Management.
Build in-house capability so your people can establish and run the BCMS themselves, through the CBCI 7.0 Certification Course, in-house business continuity training and awareness sessions on ISO 22301, NCEMA 7000 and SAMA.
Already have a BCMS? A BCMS Framework Review and the BCMS Maturity Model show where to strengthen it. Wondering whether you need one? See Why have a BCMS Framework?
We aim to reply to your enquiry within 2 hours.