Tag: gap assessment

Business Continuity Review Document Checklist for Clients

Selecting the right paperwork to achieve an appropriate capability assessment review. Read More

A necessary and sufficient BCM/resilience “evidence set”

When commissioned to review a client’s continuity and resilience capabilities I am nearly always asked – “What documentation do you need to review?” You can reflect on my response below: “Minimum Viable” set to request client to consider BCM minimum evidence set: policy & framework, risk register with BCM risks and latest assessment, approved BIAs,… Read More

Necessary and Sufficient Evidence (Consolidated Framework)

For each domain, “necessary and sufficient” evidence means: the minimum concrete artefacts and observations that prove the criterion is in place (E1), enabled (E2), and working in practice (E3). Below is a concise, practical set of examples. 1. Context, Scope, Stakeholders & Strategy 2. Leadership, Governance, Culture & Accountability 3. Integrated Risk & Opportunity Management… Read More

“Necessary and Sufficient” Resilience Evidence

You can treat “necessary and sufficient” at each level as (a) existence of defined artefacts (E1), (b) evidence of use and quality (E2), and (c) evidence that use is routine, linked to other systems, and self‑reinforcing (E3) across all seven domains.[1] Below are concise criteria you can use as an assessment rubric. 1. BCM Program… Read More

Operational Resilience and Continuity – without the drama

Our consulting offer for vulnerable times. The gap most mid-sized firms face Most firms have bits and pieces of business continuity, risk, and IT/DR work, but too often: Plans are outdated or don’t match how operations actually run today. • Operations, IT, risk, and suppliers each see their own slice – no one owns the… Read More

UNIVERSAL FRAMEWORK – Domain 7. Governance & Accountability – evidence notes

Metric: % of material issues closed on time (audit, reviews, incidents) E1 – Exists (Gateway Evidence) Do defined governance roles, accountabilities, and issue management processes exist? E2 – Enabled Are issue owners supported with authority, tracking, and escalation mechanisms? E3 – Executed Are material issues reliably closed on time, with consequences for non-closure? Evidence and… Read More

How do you “see“ your organization?

Each lens is useful for different purposes. Our clients find the “systems and processes” lens particularly useful when checking for “bloat” or “waste”. This is worth doing occasionally as organizations can become misshaped or bigger than they need to be. The two most useful approaches which our clients use to address this need are:

Believe it or not – systems, frameworks and capability assessments are still popular.

“Continuous improvement” is a clique – bordering on rhetoric … unless it is embraced within a culture as a worthy assumption. As something worth building on … and with. Management Systems – whether they are about quality, risk or business continuity – all benefit from occassional review to provide assurance that ‘the ship is on… Read More

Exceeding expectations

I don’t like the smugness of “exceeding expectations”. “Adequate” is a wonderful term. It is about focusing on a target. It rides on the shoulders of two other great terms, “necessary” and “sufficient”. Anything more is bluster and waste. To address what is necessary and sufficient to be adequate for you, consider our UpWork offerings.