Assess business resilience in terms of value

1 July 2019 Security Services & Risk Management

Businesspeople are comfortable talking about return on investment (ROI), but this may not be the right way to assess spend on business continuity and resilience programmes, says Karven Naidoo, client executive at ContinuitySA. He argues that looking at the total value of the investment (VOI) is a far better way of assessing the worth of an investment with many intangible benefits.

“To be sure, ROI discussions are useful when the amount invested can be linked to the amount the investment returns, but sometimes returns include intangibles that have huge worth that is hard to express in monetary terms,” he says. “Much marketing spend falls into this category, as does business continuity and resilience. The value a company gets from investing in business continuity and resilience far exceeds the cash it expends.”

The intangible value that can be obtained from business continuity and resilience is made up of many elements. One is the organisational and process knowledge that comes from the business impact analysis required by a business continuity management programme. How exactly do a company’s processes interact with each other, and what is their relative importance?

Many companies do not possess this knowledge at any granular level, and it can in turn lead to improved collaboration and planning at every level.

Of course, investing in business resilience strategies and capabilities puts the company on the right side of regulators and stakeholders. JSE regulations require business continuity plans to be implemented, but all companies are increasingly under pressure to be able to demonstrate they can recover quickly from a disaster and thus will not put the entire value chain in jeopardy.

Another significant value to be obtained is the avoidance of the damage to both brand and reputation inherent in a data hack or inability to trade. Finally, an investment in business continuity will mean the company has to undertake regular, in-depth risk assessments, something that greatly enhances all planning activities.

“Value of investment attempts to measure the multitude of intangible, hard-to-quantify benefits that flow from business continuity and resilience management. But one could also argue that it also includes an element of return on investment because, ultimately, the cash value of business continuity must be equivalent to the value of the company itself, including the future income it could generate for shareholders,” Naidoo concludes. “A resilient company is not sustainable, and so one could argue that an investment in business continuity is an investment in safeguarding the company’s future profits and brand.

For more information contact ContinuitySA, +27 11 554 8050, cindy.bodenstein@continuitysa.co.za, www.continuitysa.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...
Privacy by design or by accident
Security Services & Risk Management Infrastructure
Africa’s data future depends on getting it right at the start. If privacy controls do not withstand real-world conditions, such as unstable power, fragile last-mile connectivity, shared devices, and decentralised branch environments, then privacy exists only on paper.

Read more...
From friction to trust
Information Security Security Services & Risk Management Financial (Industry)
Historically, fraud prevention has been viewed as a trade-off between robust security and a seamless customer journey, with security often prevailing. However, this can impair business functionality or complicate the customer journey with multiple logins and authentication steps.

Read more...
Security ready to move out of the basement
AI & Data Analytics Security Services & Risk Management
Panaseer believes that in 2026, a board member at a major corporation will lose their job amid rising breaches and legal scrutiny, as organisations recognise that cyber risk is a business risk that CISOs cannot shoulder alone.

Read more...
Cyber remains top business risk, but AI fastest riser at #2
News & Events Security Services & Risk Management
The Allianz Risk Barometer 2026 ranks cybersecurity, especially ransomware attacks, as the #1 risk, while AI is the biggest riser and jumps from #10 to #2, highlighting the emerging risks for companies in almost all industry sectors.

Read more...
OT calculator to align cyber investments with business goals
Industrial (Industry) Information Security Security Services & Risk Management
The OT Calculator has been developed specifically for industrial organisations to assess the potential costs of insufficient operational technology (OT) security. By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions.

Read more...
From digital transformation to digital sovereignty
Security Services & Risk Management IoT & Automation
As cyberthreats grow, data regulations tighten, and AI becomes central to economic competitiveness, countries are recognising the need to control and protect their own digital assets.

Read more...
The age of Lean 4.0: Orchestrating intelligence and efficiency
Security Services & Risk Management
The convergence of Lean principles and AI (what we now call Lean 4.0) is no longer a theoretical exercise; it is the defining operational paradigm for survival and growth in a complex, data-intensive economy.

Read more...
Risks of open-source intelligence escalating in crime
Security Services & Risk Management Residential Estate (Industry) Smart Home Automation
CMS estimates that open-source intelligence has played a role in 20 - 30% of robberies over the past 12 months. In cybercrime, global research consistently shows that many offences rely on some form of open-source data exploitation.

Read more...
Seeing is no longer believing
Security Services & Risk Management
Fraud has shifted. It is no longer just about financial theft; it is about identity theft in the most visceral sense. The most effective control is often completely non-technical: the ‘pause and verify’ rule.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.