Understanding & measuring exposures provides a cleared, more actionable perspective on risks

For many organisations, developing a risk register is seen as a destination - and it should not be. Often, the corporate risk register is seen as some kind of holy grail and this, coupled with some periodic assertions of relevance and controls performance, forms the "risk management system". A risk register is basically a statement of scope and intent: the organisation has identified the risks or threats it thinks are significant enough to warrant doing something about and w

Recovering from a cyber attack can be one of the greatest challenges an organisation can face. Successful attacks can result in ransom demands to decrypt data or to prevent exfiltrated data from being published in the public domain. Whether or not a ransom demand is paid both "denial of data" by encryption or data exfiltration attacks can result in lengthy post-incident handling, recovery and clean-up activities - which can weeks and, in some cases, months. A cyber-attack in

^ things senior management need to know about their organisations business continuity capabilities

What can we learn from the Facebook / WhatsApp melt-down

Working from home Many UK businesses have adopted remote working as the only operating alternative during the lockdown. The experience of...

Organisational resilience vs. business continuity For many - (including me), much of what is described as resilience still looks suspiciously like “warmed up” business continuity. Nevertheless, I believe that resilience is different to business continuity. I don’t see it as an alternative to business continuity – rather, that there is a strong inter-relationship and that they complement each other as part of an overarching framework for operational stability. In the financia

Is the concept of risk appetite practical & helpful?

Micro simulations work on the basis of short. highly focused tests on one specific aspects of incident response. Their focus tends to be...

How to choose a GOOD business continuity plan template to create a good quality, effective business continuity plan. This guide will show you how to evaluate a business continuity plan templates

Following the publication of the final policy in March 2021, although the final operational resilience framework does not depart...

A walkthrough of the business continuity organisation structure section of a business continuity plan template

Insurance firm One Call has reported that it had been hit by a ransomware attack that disrupted its core IT systems, forcing the company the company to shut down its IT services. In an update on its website, the company said that issues with its IT systems began to surface on 13th May, and since then it has been working with external specialists to restore affected systems. The ransomware attack was first disclosed by the local newspaper Doncaster Free Press , which claimed

An example BCP test Timeline from the Business Continuity Plan Testing Templates 1) Data loss Let’s start with one of the most common...