PREFACE
The last few years have not been an easy time for the world. Major events have been shocking everywhere, causing severe impacts and consequences. The H1N1 outbreak, earthquakes in Chile and Haiti, and BP’s oil spill in the Gulf of Mexico are living proof of the damage that nature and humans can do. Risks and threats to our societies, businesses, and people have also been increasing, in both quantity and quality. Threats to cyber security, supply chain interruptions, and extreme climatic changes are examples of these.
The effects of these major events and disasters derive partly from our faulty mindset towards understanding and dealing with them. Hoping that nothing bad will happen because it has not happened before is the first thing we need to change. Looking at the world around us, is it the same as it was one year, or even six months, ago? Being in reactive mode and telling ourselves that we can survive by fire-fighting a disaster when it happens is definitely a losing gamble. We can make it through disasters and major events by proactively addressing the risks and be in a ready state. Being proactive should not be performed in an ad-hoc manner. It should follow a systemic and comprehensive approach, covering all the details in the big picture.
Business continuity management (BCM) provides organizations with the effective methods needed to protect them from the impacts and consequences of major incidents or disasters though structured and controlled programs. Proper and effective BCM programs can put the organizations in the driving seat and let them control courses of action by proactively detecting and managing the risks and threats that can lead to disasters. Equally, they keep the organization in a ready state to react to disasters and mitigate their impacts and losses.
BCM is not rocket science. It’s a scientific, logical, and practical methodology that can be customized and enhanced. Now, with the existence of globally accepted standards, BCM programs enjoy common sets of specifications that can be translated into practical implementations and tangible results. Adopting BCM is not an option; it’s a survival decision and is the right step towards protecting an organization.
This book aims to provide a clear, yet strong, introduction to the world of BCM. It builds on internationally recognized standards and best practices like the ISO22301 societal security and ISO27031 ICT readiness for business continuity (IRBC). What we will see within this book is the result of an extensive journey with BCM that has not come to an end. The two main features that are noticeable here are comprehension without overkilling the subject and practicality without underestimation.