AgileBCP – favorite feature number 2 – using ‘risk’ as a lens into future uncertainties

In the real world, there are no silver bullets (magic, single-dose solutions)
AgileBCP is a great tool – but it is not a ‘silver bullet’

We recognize that risk is a concept.

It is a useful concept as it helps us get a better handle on future uncertainties.

The AgileBCP risk lens can (and should) be applied BEFORE a disruption event – and AFTER a disruption event.

Before event risk is a function of resource criticality and vulnerability (to impact)
After event risk is a function of resource criticality (which should be validated) and impact (on operability).

Nature’s warning color – red – is used to stimulate discussion. A ‘red flag’ calls for serious and immediate considerations. Orange – important but probably not immediate, Yellow – cautionary and needing to be watched closely, Green – sound but still keep an eye on it.

Color coding drives the conversation.

Risk puts on notice the need for conversations about what ought to be done – and what does not need to be done. Indeed the only reason for risk assessment is in order to inform action – or inaction. Risk assessment has no inherent merit. It ought not to be academic. Risk exists, as a concept, in order to inform decisions.

Once a decision is made, any implementation plan(s) should be kept as long as necessary but as short as possible. Specifying what needs to be done and what is needed to do it. Implementation plans are then supported by standard management practices of monitoring the achievement of the required outcomes by ensuring the plans are on track, on budget, and on time.

It’s not rocket science

How often have you heard someone say that in a conversation?

It may not be “rocket science” (that is to say “requiring the application of expertise”) to them, but it is just rude to be dismissive. It alienates and it isolates. It erodes respect.

Things which are “not rocket science” are often just not very interesting – or they just don’t add enough immediate business value. Risk and the management of risk is one such a thing … and in some specialist applications such as business continuity, can be outright dry.

Therefore it is not uncommon for risk practitioners to peddle their message by “scaring your pants off”. This is done by the use of metaphor and imagery – especially worst case scenarios (horror stories). My own example is shown in the 58 second video above (Twitter and Instagram set limits of under a minute – and we are urged to respect the new concentration span of thirty seconds).

My elevator pitch is more likely to be a quiet chat about how vulnerability to extreme events – and their impacts – can be best managed by good decision making. Urge people to consider building a sound plan – not to just rely on what is in your head.

Considering developing an information based decision making approach?
Click here.

As a footnote on business continuity planning not adding enough immediate business value it is worth thinking about how a business continuity planning review could (albeit ruthlessly) support making sure the allocation of resources across the organisation is fit for purpose.