Three key questions CEOs need to ask

March 2015 Security Services & Risk Management

Many CEOs tend to see business continuity management purely within the context of complying with King III and other governance codes. But, says Leigh-Anne van As, business development manager at ContinuitySA, CEOs also need to see how business continuity management can help them answer three key strategic questions.

Van As argues that CEOs need to be able to answer ‘yes’ to these questions:

• Do you know which products and services offered by your company are vital to ensuring its strategic objectives can be met?

• Is your organisational structure aligned to the company’s strategic objectives?

• Do you know exactly which resources (including human resources) are required for the company to achieve its strategic objectives?

“Companies typically offer a multiplicity of products and services, but CEOs and their immediate teams need to understand which ones are absolutely vital to the company’s ability to meet its strategic targets. They also need to understand exactly which resources are essential to delivering those products and services,” she explains. “Once they have the answers, CEOs and their teams can allocate investment and attention appropriately, and optimise the company’s operations.”

Because companies often lose sight of what their core business actually is, they can find out too late that even a small disruption to a vital process can cause a major disruption to clients. Once lost, market share can be hard to regain – if at all.

“In the same vein, while every part of the business is important, not every part has the same time-sensitivity. Do CEOs properly understand the role each process plays in delivering the strategy, and how quickly, and in which sequence, each one has to be restored in the event of a disruption?” Van As asks.

CEOs also need to understand the company’s risk profile – some firms are more at risk than others. Factors here might be a high reliance on unionised labour, dependency on a single supplier, or even their location.

Those companies that don’t have the answers, or that are not confident of their correctness – and this is likely to be the case in a majority – can find/validate the necessary information from the business continuity management process.

“As part of putting a business continuity management plan in place, an initial strategic business impact analysis (BIA) should be undertaken. This helps leaders to understand very quickly the specific risks the company faces. The business impact analysis also includes a subsequent detailed analysis of how the various components of the organisation interact with each other, and their relative importance. It is even likely to identify and quantify the costs linked to failures, including lost profits. “

This kind of detailed understanding of how the company actually works, and the relative impact of the failure of each of its components, is not just useful in planning for disaster. It also provides vital information that can be used to improve the company’s normal operations and to give the CEO a three-dimensional view of how the company works.

“In short, the business continuity plan is more than insurance against disaster – it can play a key role in building, and communicating, a sounder picture of what’s important to a company’s long-term success, and help leaders formulate and implement strategy much more effectively. It can also help CEOs understand the industry context in which they are operating much better,” Van As concludes.

For more information contact ContinuitySA, +27 (0)11 554 8050, [email protected], www.continuitysa.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Your Wi-Fi router is about to start watching you
News & Events Surveillance Security Services & Risk Management
Advanced algorithms are able to analyse your Wi-Fi signals and create a representation of your movements, turning your home's Wi-Fi into a motion detection and personal identification system.

Read more...
Cybersecurity and insurance partnership for sub-Saharan Africa
Sophos News & Events Information Security Security Services & Risk Management
Sophos and Phishield Announce first-of-its-kind cybersecurity and insurance partnership for sub-Saharan Africa. The SMARTpod podcast, discussing the deal and the state of ransomware in South Africa and globally, is now also available.

Read more...
FICA in the era of deepfake and AI-driven fraud
Security Services & Risk Management
A growing fraud strategy involves leveraging AI to produce highly convincing fake images, videos, and audio, commonly referred to as deepfakes, which are used to impersonate real individuals and spread misleading or false information.

Read more...
Risk management and compliance enforcement
Security Services & Risk Management
Having a risk management and compliance programme (RMCP) is not just a procedural formality; it is a legal requirement under Section 42 of the Financial Intelligence Centre Act (FICA).

Read more...
The dangers of poor-quality solar cables
Security Services & Risk Management Smart Home Automation
Reports indicate that one in six fires attended by South African firefighters is linked to substandard solar installations, often due to faulty wiring or incompatible components.

Read more...
Growing risks for employers
Security Services & Risk Management
With South Africa’s unemployment rate exceeding 32% and expected to rise beyond 33% this year, desperation is fuelling deception in the job market. Trust is no longer a given, it is a gamble.

Read more...
Chubbsafes celebrates 190 years
Gunnebo Safe Storage Africa News & Events Security Services & Risk Management
Chubbsafes marks its 190th anniversary in 2025 and as a highlight of the anniversary celebrations it is launching the Chubbsafes 1835, a limited edition 190th-anniversary collector’s safe.

Read more...
New law enforcement request portal
News & Events Security Services & Risk Management
inDrive launches law enforcement request portal in South Africa to support safety investigations. New portal allows authorised South African law enforcement officials to securely request user data related to safety incidents.

Read more...
Continuous AML risk monitoring
Access Control & Identity Management Security Services & Risk Management Financial (Industry)
AU10TIX, launched continuous risk monitoring as part of its advanced anti-money laundering (AML) solution, empowering businesses to detect behavioural anomalies and emerging threats as they arise.

Read more...
Growing risks for employers
Security Services & Risk Management
With South Africa’s unemployment rate exceeding 32% and expected to rise beyond 33% this year, desperation is fuelling deception in the job market. Trust is no longer a given, it’s a gamble.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.