According to Investopedia.com, governance is defined as “the system of rules, practices and processes by which a firm is directed and controlled.” Governance is a vital part of every organization, because it ensures that employees and management at all levels of the organization are doing the right things and working to reach the same common goal. Unsurprisingly, governance also plays a key role in Business Continuity Management (BCM), because effective BCM needs to be a part of the organization’s “way of life”. BCM is not a project that terminates at a given date, but rather a practice that must be continuously integrated into the organization’s operations. Ensuring that an organization’s governance is aligned with the BCM Program is one of the key considerations during development, implementation and maintenance.
One of the most widely used resources of Business Continuity professionals is the Professional Practices for Business Continuity Management developed by the Disaster Recovery Institute International. The professional practices outlined in this document serve as an excellent foundation for successful BCM Program implementation. Governance is brought up numerous times throughout the professional practices, because it comes into play at multiple stages of the planning process. The existing governance structure of an organization must be taken into account when assessing the organization’s current state. However, the organization must also be willing to make changes to the governance stricture to maximize BCM Program effectiveness.
BCM Program requires a strong Governance model
Governance spans all levels of an organisation, and different solutions must be implemented at the various levels. The integration of BCM must start at the top of the governance structure and then work its way into all the other levels in various capacities. It is impossible to effectively integrate BCM into the governance structure without the commitment of an organization’s top-level executives and or Board of Directors. Achieving this commitment will usually require the Business Continuity professional to spend time communicating directly with at least some of the executives assigned as a BCM Program sponsors.
Once the top-level executives commit to incorporating BCM into the organisation’s structure, the implementation should happen at each different level of the structure. Every organisation will need to assign BCM tasks to stakeholders at various levels. They are often referred to as BCM leads, champions, coordinators or some other title depending on the organisation. A BCM champion is responsible for a specific team or division and must ensure that all relevant policies, documentation and training materials are updated and distributed to the team or division.
Right stakeholders are a key
BCM ‘champions’ should be appointed at each level of the governance structure. The methodology for incorporating BCM into the governance structure is very similar for any type of organisation. The only differences will come in the form of varying complexity and the number of BCM champions required. A large organisation with multiple business lines, many divisions within each business line, and various functions for each division will require the involvement of more stakeholders than a small organisation with only a handful of functions.
Regardless of the size and complexity of the organization, the key focus is always on ensuring that employees at all levels are aware of changes to the governance and have access to any relevant information. They must be aware of any changes to the processes and functions they may need to carry out. Poorly defined and implemented governance can lead to a lack of direction for the organisation as well as inconsistencies across departments or divisions. Failing to update the organisation’s governance during the BCM Program implementation or maintenance phases will reduce the impact of the Program and potentially lead to ineffective program and wasted resources.
StratoGrid Advisory is a Business Continuity Management and IT Advisory firm in Ottawa that can provide you with the experience and knowledge needed to successfully implement BCP Program in your organization.
Sign up for our monthly newsletter
Some of our recent articles: