EIU research backs Forum - "Business Unprepared for Disaster"

The survey, of 240 senior executives round the world, released today, paints a far gloomier picture than the Business Continuity Insitute, which claimed in March that 20 percent of companies had no disaster plan.

The lack of preparedness is even more stunning, given that those executives claim to be prioritising business continuity; even though two-thirds said business continuity was a top priority, two thirds of companies surveyed were not suitably prepared, according to researchers.

Forty-six percent claimed preparing for disaster or disruption had always been that important, while 18 percent said it had become more critical since the terrorist attacks of 11 September, 2001. A not inconsiderable portion (28 percent) had actually had first hand experience of a disaster or severe disruption to their systems.

"Business continuity is securely up there as a board level issue," said Gareth Lofthouse, research director at EIU. His organisations' findings show, however, that despite the boards fine words, business continuity is not being implemented effectively.

The EIU's study was global, but the UK picture may be even worse, said Lofthouse. "The US are a bit more focussed on this issue," he said. "Forty-six percent of US respondents said continuity was a priority, against 25 percent in the UK. It is possible that the British are a bit more measured, and showing reserve about the issue."

The EIU found no clear ideas about who should be responsible for business continuity. "Every man and their dog is in charge," said Lofthouse. "There is no clear single function — and business continuity is often bolted onto someone's full time job."

Nine percent of the companies surveyed had a dedicated business continuity manager, though Lofthouse judges that more than half were large enough to justify such a post. The rest dumped the business continuity function on other people: the CFO (19 percent), the CIO (14 percent) and others including the corporate planning officer and chief risk officer.

Companies that fail to get business continuity in place face a much more certain doom than earthquake, fire or terrorist activity, warned Lofthouse. "Regulations such as Sarbanes-Oxley and Basel 2 require companies to prove that certain processes are protected and recoverable," he warned. "That's more predictable than a tsunami or a 9/11."

Other mundane disasters might include the loss of business with a major customer. Rover's business partners should have had a plan in place, said Lofthouse, as should Marconi, which recently failed to win a BT contract on which it was relying.

The only bright spot is that financial-services companies, who have faced these regulations first, are the most advanced at formalising continuity plans, said Lofthouse.

"The Bank of New York is a good example," he said. "They have invested a lot in business continuity, and created a sophisticated strategy. They are doing testing and pursuing geographical diversity." The Bank had to evacuate 8,000 people after 9/11, he explained, and get their processes back immediately. "They've vowed never again to have this concentration of resources in one centre."

The EIU research mirrors very closely the finding of the Continuity Forums most recent programmes including the 6th Annual BCM Study by the Continuity Forum and the Chartered Management Institute.

CONTINUITY FORUM Comment

We're becoming increasingly concerned at rather vague research that points towards the majority of Companies having effective BCM programmes in place, especially when it is evident to all that this is NOT the case. It appears as though there is belief that talking about BCM more will led to greater resilience. It won't.

Many companies have invested in some measures and certain sectors do have a greater level of capability, but the reality is very different from what some are portraying. Most Companies and Organisations are still woefully under-prepared and yet they appear to be suffering from a self deluisonal belief that they have made significant progress through inaction and prevarication.

To prove the point take a moment to LOOK at your own organisation and its partners and ask a few pointed, dare we say it, intelligent questions about the programmes actually in place - what aspects of the operation they cover, how they are communicated and tested -and you'll quickly see that there is much to be worried about.

Having a Survey (or three!), say BCM is an URGENT Board level Priority is a very very long way from being able to say that the Organisation actually has acted and resolved the issue.

END
__________________

If you have any comments on this article or would like to find out more about the work of the Continuity Forum please contact Sara McKenna or Russell at the Continuity Forum directly on 020 8993 1599 or info@continuityforum.org