Today’s businesses face the increasing challenge of managing complex operations across multiple entities as they integrate business partners, suppliers, and even competitors into an extended enterprise. The reliability and continuity of these operations are critical to business survival, and to building competitive advantage. One company’s business interruption brings a tremendous impact on the entire network of related entities. The need for an effective risk reduction and business continuity management (BCM) program has never been so evident.
Additionally, the even stricter, complex regulatory and compliance requirements are forcing companies to implement business continuity management programs. Also, from a CSR perspective, BCM has gained increasing importance as a means to build competitive advantage.
At Deloitte Japan, Business Continuity Management is regarded as part of Risk Management and based on the proprietary Deloitte BCM methodology, which is designed on a modular framework that allows us to tailor our services based on your particular business needs.
At Deloitte Japan, we take advantage of the efficient and effective Deloitte BCM Methodology divided into four phases – Analyze, Develop, Implement and Continuous Improvement/Quality Assurance.
Designed by experienced BCM professionals, the Deloitte Methodology is successfully field-tested in different environments, utilizes well-documented frequently used best-practices and has been continuously improved. Our methodology includes a comprehensive package of worksheets, databases and checklists that are used in actual business practices.
Business Continuity Management is not a process with a limited life and a finite end, but rather an ongoing, living program. To ensure the continued viability of the business continuity program, management needs to understand:
The organization’s current state of preparedness
The risks to continuity of operations that the organization faces
The impact of business interruptions of various durations
Develop strategies for attaining the organization’s continuity goals. With Deloitte’s approach, the Business Continuity Management program is built to anticipate outages and failures (disasters, scandals, pandemics etc) and to be prepared either to mitigate their effects or hasten the recovery.
A part of this preparedness is having a documented understanding of the roles, responsibilities and actions that personnel will take when a serious interruption of operations occurs.
The strategies developed in the previous phase often require the acquisition of resources, negotiation of contracts, implementation of software, etc. While this is usually a client responsibility, Deloitte professionals often assist in the implementation process.
Testing, training and maintenance are critical components of any Business Continuity Management program. We also assist our clients in putting administrative procedures in place during the various stages of the implementation process.
Deloitte offers you a variety of support services for your BCM implementation through one or all of the following phases – Analyze, Design, Implement and Continuous Improvement/ Quality Assurance phases. Whether you’re starting from scratch or building on an existing program, Deloitte can tailor its approach to meet your particular needs by either implementing BCP in full or by selecting those services that meet your particular business needs.
|Analyze||Business Continuity Plan (BCP)/ Business Continuity Management (BCM) diagnostics
Perform Diagnosis of issues such as governance, business processes, facilities recovery plan, training/testing, investigations related to relevant laws and regulations, business continuity planning/business continuity management effectiveness.
Diagnosis will be performed using the Deloitte proprietary “BCM Diagnostic” tool. Based on the diagnosis results, we also make recommendations for improvement.
Deloitte’s Risk assessment methodology identifies credible threats to your organization based on three steps of scenario development. ・Identify resources ・Evaluate inherent risks ・Develop risk scenarios
|Business Impact Analysis (BIA)
The Business Impact Analysis (BIA) helps you quantify the impact of a disruption involving one or more critical resources (eg. People, technology, infrastructure and vendors) and establish organization-wide availability objectives and priorities. Deloitte uses the “BIA Toolkit”, a proprietary software tool, to gather and analyze the necessary data.
|Develop||Emergency Recovery Strategy/ Plan
Based on the results of the Business Impact Analysis (BIA), implement emergency response and recovery procedures and the introduction of proactive measures for prevention and recovery preparedness. Deloitte will collaborate with you to develop the immediate action, recovery and business resumption procedures to restore actual business processes based on management’s approved objectives.
Deloitte will assist in recommending alternative strategies for recovery plans related to sensitive data such as operations, personnel, location, communication, and information systems.
The test and exercise tools are based on a structured planning approach involving primary and secondary objectives through the post-test action plan for program improvement. If necessary, we help conduct training and tests at outsourcees and external agencies.
|Continuous Improvement/ Quality Assurance
||Maintenance (BCP/BCM continuous improvement)
Because of risk, organization and information systems changes, it is important to implement a continuous improvement/quality assurance program. This process sets into place the analysis and assessments needed to help your organization become self-sufficient in maintaining an ongoing state of readiness.