Implementing a BCM Program (Part 3)

In many cases the BCM policy and approaches are driven by standardization bodies along with local, regional, industry-imposed requirements. 1 Said another way from a previous BCM definition: 2 BCM is an: Holistic management process that identifies potential impacts that threaten an organization with associated risk, and provides a framework for building resiliency with the capability for an effective response which safeguards the interests of its key stakeholders, reputation, brand and value creating activities. > Threats are developed from the Risk Assessment (RA) by identifying potential hazards with the highest probability, impact and vulnerability. > The BCM view of the Organization as distinct named Critical Functions, locations, dependencies and technology requirements is determined from the Business Impact Analysis (BIA) > An Effective Response is developed by focusing on recovery strategies for each of the organization’s critical functions with a recovery plan that attains a defined Maximum Allowable Outage (MAO) value for each. The BCM process will need to address each of the above elements in order to implement an effective Business Continuity Management program.