Three key questions CEOs need to ask

March 2015 Security Services & Risk Management

Many CEOs tend to see business continuity management purely within the context of complying with King III and other governance codes. But, says Leigh-Anne van As, business development manager at ContinuitySA, CEOs also need to see how business continuity management can help them answer three key strategic questions.

Van As argues that CEOs need to be able to answer ‘yes’ to these questions:

• Do you know which products and services offered by your company are vital to ensuring its strategic objectives can be met?

• Is your organisational structure aligned to the company’s strategic objectives?

• Do you know exactly which resources (including human resources) are required for the company to achieve its strategic objectives?

“Companies typically offer a multiplicity of products and services, but CEOs and their immediate teams need to understand which ones are absolutely vital to the company’s ability to meet its strategic targets. They also need to understand exactly which resources are essential to delivering those products and services,” she explains. “Once they have the answers, CEOs and their teams can allocate investment and attention appropriately, and optimise the company’s operations.”

Because companies often lose sight of what their core business actually is, they can find out too late that even a small disruption to a vital process can cause a major disruption to clients. Once lost, market share can be hard to regain – if at all.

“In the same vein, while every part of the business is important, not every part has the same time-sensitivity. Do CEOs properly understand the role each process plays in delivering the strategy, and how quickly, and in which sequence, each one has to be restored in the event of a disruption?” Van As asks.

CEOs also need to understand the company’s risk profile – some firms are more at risk than others. Factors here might be a high reliance on unionised labour, dependency on a single supplier, or even their location.

Those companies that don’t have the answers, or that are not confident of their correctness – and this is likely to be the case in a majority – can find/validate the necessary information from the business continuity management process.

“As part of putting a business continuity management plan in place, an initial strategic business impact analysis (BIA) should be undertaken. This helps leaders to understand very quickly the specific risks the company faces. The business impact analysis also includes a subsequent detailed analysis of how the various components of the organisation interact with each other, and their relative importance. It is even likely to identify and quantify the costs linked to failures, including lost profits. “

This kind of detailed understanding of how the company actually works, and the relative impact of the failure of each of its components, is not just useful in planning for disaster. It also provides vital information that can be used to improve the company’s normal operations and to give the CEO a three-dimensional view of how the company works.

“In short, the business continuity plan is more than insurance against disaster – it can play a key role in building, and communicating, a sounder picture of what’s important to a company’s long-term success, and help leaders formulate and implement strategy much more effectively. It can also help CEOs understand the industry context in which they are operating much better,” Van As concludes.

For more information contact ContinuitySA, +27 (0)11 554 8050, cindy.bodenstein@continuitysa.co.za, www.continuitysa.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Deception technology crucial to unmasking data theft
Information Security Security Services & Risk Management
The ‘silent theft’ of data is an increasingly prevalent cyber threat to businesses, driving the ongoing leakage of personal information in the public domain through undetected attacks that cannot even be policed by data privacy legislation.

Read more...
Data security and privacy in global mobility
Security Services & Risk Management Information Security
Data security and privacy in today’s interconnected world is of paramount importance. In the realm of global mobility, where individuals and organisations traverse borders for various reasons, safeguarding sensitive information becomes an even more critical imperative.

Read more...
Proactive strategies against payment fraud
Financial (Industry) Security Services & Risk Management
Amid a spate of high-profile payment fraud cases in South Africa, the need for robust fraud payment prevention measures has never been more apparent, says Ryan Mer, CEO of eftsure Africa.

Read more...
How to prevent and survive fires
Fire & Safety Security Services & Risk Management
Since its launch in August 2023, Fidelity SecureFire, a division of the Fidelity Services Group, has been making significant strides in revolutionising fire response services in South Africa.

Read more...
A long career in mining security
Technews Publishing Editor's Choice Security Services & Risk Management Mining (Industry)
Nash Lutchman recently retired from a security and law enforcement career, initially as a police officer, and for the past 16 years as a leader of risk and security operations in the mining industry.

Read more...
Risk management: There's an app for that
Editor's Choice News & Events Security Services & Risk Management
Zulu Consulting has streamlined the corporate risk management process with the launch of Risk-IO, a web-based app designed to consolidate and guide risk managers through the process, monitoring progress as one proceeds.

Read more...
Integrated information platform for risk management
Editor's Choice News & Events Security Services & Risk Management
Online Intelligence recently launched version 7 of its CiiMS risk and security platform. Speaking to SMART Security Solutions after the launch event, the company’s Arnold van den Bout described the enhancements in version 7.

Read more...
Global Identity Fraud Report revealing eight-month ‘mega-attack’
Editor's Choice Security Services & Risk Management
AU10TIX recently released its Q4 Global Identity Fraud Report, with the research identifying two never-before-seen attack patterns, with the worst case involving 22 000+ AI-generated variations of a single U.S. passport.

Read more...
Linking of security officers by security businesses
PSiRA (Private Security Ind. Regulatory Authority) News & Events Security Services & Risk Management
[Sponsored] By law, all security businesses are required to declare their employees to PSiRA so that they can be accounted for administratively. Failure to link employees by security businesses is a contravention of the Code of Conduct and a criminal offence.

Read more...
AI augmentation in security software
Security Services & Risk Management AI & Data Analytics
The integration of AI technology into security software has been met with resistance. In this, the second of two articles, Paul Meyer explores the challenges and obstacles that must be overcome to empower AI-enabled, human-centric decision-making.

Read more...