Business Continuity Review Document Checklist for Clients

Selecting the right paperwork to achieve an appropriate capability assessment review. Read More

A necessary and sufficient BCM/resilience “evidence set”

When commissioned to review a client’s continuity and resilience capabilities I am nearly always asked – “What documentation do you need to review?” You can reflect on my response below: “Minimum Viable” set to request client to consider BCM minimum evidence set: policy & framework, risk register with BCM risks and latest assessment, approved BIAs,… Read More

Necessary and Sufficient Evidence (Consolidated Framework)

For each domain, “necessary and sufficient” evidence means: the minimum concrete artefacts and observations that prove the criterion is in place (E1), enabled (E2), and working in practice (E3). Below is a concise, practical set of examples. 1. Context, Scope, Stakeholders & Strategy 2. Leadership, Governance, Culture & Accountability 3. Integrated Risk & Opportunity Management… Read More

“Necessary and Sufficient” Resilience Evidence

You can treat “necessary and sufficient” at each level as (a) existence of defined artefacts (E1), (b) evidence of use and quality (E2), and (c) evidence that use is routine, linked to other systems, and self‑reinforcing (E3) across all seven domains.[1] Below are concise criteria you can use as an assessment rubric. 1. BCM Program… Read More

Yes, of course … but what is the right question?

Asking the right questions: what great thinkers teach leaders about inquiry Voltaire once wrote, “Judge a man by his questions rather than by his answers.” That single line turns a lot of conventional leadership wisdom on its head. We are used to celebrating the leader with the confident answer, the bold solution, the decisive verdict.… Read More