Governance

It is key that the business continuity process is supported by a sound governance structure that can steer and respond to requests that emerge from the process. An inadequate structure will impede the success and significantly affect the effectiveness of the business continuity plan.

The first step towards implementing business continuity is to set up the required governance structure to support the process, identify and mobilise the department's resources, obtain governance structure members' commitment and involve these individuals in the business continuity process. The following generally accepted characteristics of a sound governance structure should be present during the set-up:

a. The governance structure should extend the functional (business side) and technical (compliance side) organisations up to the point of convergence;

b. The governance structure should extend to three layers of management:

• Corporate Governance - ultimately responsible for the performance of both sides of the governance structure
• Direct Governance - corresponds to the Director General, Director; and
• Planning and Control - corresponds to the business function owners and project leaders responsible for the day-to-day conversion activities and monitoring of the project activities;

c. Along with this structure, clear accountabilities and roles should be defined regarding business continuity, including the responsibility to decide on the department's response to risks; and

d. Accountability for the continuity of operations should rest with the functional personnel; accountability for the conversion of assets should rest with the technical personnel within the organization; and committees should only be used to provide guidance and build consensus.

For more information on governance and its importance in business resilience contact our consultants on 08547 715 715.