Join me Thursday, July 30/20, as I talk with Vendor Management expert, Vicky McKim.
We’ll discuss the key Vendor Management procedures, Risk Management and Risk Controls, and Supply Chain Management.
Enjoy!
The StoneRoad Team
Category Archives: Incident Management
Preparing for the Unexpected (2020-06025): COVID-19 – 2nd Wave, Vaccines, Therapeutics and the Future
Join me this Thursday, June 25/20, as I continue our monthly chat with Regina Phelps about Covid-19. Covid-19 is going to be with us for some time yet, especially with the numbers we’re seeing around the globe. We’ll talk about what’s happening around the globe right now and what we can expect in the future. Regina will also talk to us about the latest news with regards to vaccines and therapeutics. It’s another informative episode you won’t want to miss.
Enjoy!
The StoneRoad Team
Preparing for the Unexpected (July 16/20): COVID-19 and Business Continuity Management
The global Business Continuity Management (BCM) landscape is changing; from supply chain management to disaster response to the effects and impacts of the Covid-19 global pandemic. We talk to internationally recognized BCM industry leader and expert, Patrick (Pat) Corcoran from IBM. Continue reading
New Business Functions: The BCM Professional and the Project Manager
I recently read an article where individuals were asked what the role of the Business Continuity Management (BCM) should be when a new business function will be introduced. There were comments from ensuring Change Management is introduced to the BCM professional needs to perform a Risk Assessment (RA), Business Impact Analysis (BIA) to developing continuity plans and implementation and rollback plans. Now, all that is good BUT, I found it odd that not a single respondent gave the most obvious answer – and it has nothing to do with the BCM professional.
If the organization has determined to introduce – or develop – a new business process (and related technology functionality), the responsibility to ensure all of the things I noted above are completed belongs to the Project Management Office (PMO) and the assigned Project Manager (PM). It’s not the responsibility of the BCM professional to ensure all that is completed.
Now, I’ve always said that BCM professionals need to have a project management experience, or at least have some basic knowledge of project management (as outlined by the Project Management Institute – PMI) but they don’t suddenly become the driver of the bus for all projects.
BCM gets involved at the time the PM – and the schedule – says it’s logical to get involved and execute the appropriate project deliverables, which when completed accordingly, help mitigate risks and/or update the appropriate risk plans, contingency plans (it may be a new plan if the new process creates new departments etc) and technology recovery plans.
With allot of PM experience behind me, I know that every single PMO office I’ve ever worked for – as a PM, Control Officer or Program Officer – there are some basic deliverables that are performed through project management. That includes completing some sort of Risk Profile and Business Impact Assessment, which the BCM professional may be brought in to assist with completion and in most cases, it’s not their responsibility to determine how this is managed. The PM will take the appropriate completed documents and provide to the project stakeholders for approval or additional input/amendments. Then, it may be provided to the BCM professional to action accordingly (e.g. update contingency plans, technology plans etc.). The BCM professional isn’t the one that makes the final determinations during project flight; that’s the responsibility of the PM.
The BCM professional has to make sure that when that inflight project becomes Business As Usual (BAU), all the appropriate activities are completed and ready to accept the new function (project deliverable).
That means that the implementation plans (business and technology) and rollback plans are developed by the appropriate project team workstream lead but is not developed by BCM. There are already people within a PMO office responsible for those activities.
On another note, the Crisis Management Team (CMT) may not even ben involved during project implementations, even when there’s an issue with implementation and roll back occurs. If it doesn’t impact operations then it’s the project’s Command Team that takes control, though some of those individuals on the CMT may be part of the project team based on their daily roles and responsibilities.
Implementation communications are usually managed by the Business Operations team whose job it is to manage communications with clients and customers (the name of the department may change from company to company). Still, they aren’t done or managed by BCM, they are done by the Project Team.
The PM is responsible to make sure that all of these activities are completed properly and to the standards required by the organization’s PMO and documents the handoff to the business owner, which would include ensuring that BCM/BCP/DR has been involved and are ready to accept the new process (if they haven’t been already).
I found it odd that not one responded to the question in the article mentioned Project Management, which is a discipline on its own with various skill sets. Good PMOs and good PM’s will bring in the BCM group when it’s acceptable to do so to ensure that the moment the new process (and related technical functionality) goes live, it’s in a good position to respond to a disaster situation. This might even include a dry ‘test’ or ‘DR simulation’ prior to going live or very shortly after going live. I’ve been in organizations that say a full DR of a new function/technical configuration, must be tested within 60 days of going live – or sooner.
The BCM role isn’t the same as a Project Manager’s role, but the BCM professional must understand Project Management to ensure a smooth transition from idea to implementation to a ‘live’ state.
© StoneRoad 2020
A.Alex Fullick has over 21 years’ experience working in Business Continuity and is the author of numerous books, including “Watch Your Step”, “BIA: Building the Foundation for a Strong Business Continuity Program.”and “Testing Disaster Recovery and Business Continuity Plans
BCM / DR / Covid-19: Normal is Gone!
All around me I see people talking about ‘going back to normal’. I hear journalists talking about ‘going back to normal’ and I even see the writing of BCM/DR professionals talking about ‘going back to normal’. Well, I got news for you – what they all believed as ‘normal’ is gone. Continue reading
BCM/DR & Covid-19: The Rush is On!
All around me I see people focused on Covid-019 and as it’s such a major aspect, incident and focus in today’s world, that’s not surprising. The amount of impact a tiny virus cell has had on the world is incredible. Who ever said the small things don’t matter, obviously didn’t know anything about diseases and pandemics.
The rush seems to be on to update plans? Seriously? Where was the updating over the last few years? Have BCM/DR practitioners forgotten that updating and maintaining plans and programs is a key aspect of the entire industry? It’s not a one-time thing, which seems to be the practices right now Anyone that comes out and says they are updating their plan now that the Covid-19 pandemic is here was not updating their plan prior to the outbreak. I don’t get it! Why weren’t we doing it? Did we become complacent and just not think that maintenance was necessary; that a one-time plan development was good enough?! Or that once we had a plan and did some sort of test/exercise, which probably entailed more planning than the actual development of the plan itself – was good enough. Sorry, that’s just not going to cut it.
Why?
Why did we become so complacent and not maintain our plans? Some have kept them up to date, as you see blogs and posts on social media sites stating they they’re following their plans and protocols but they seem to be either less than or equal to, the number of those that didn’t maintain their plans. If they weren’t maintaining their pandemic plans (aka People Availability Plans), I’m curious to know just what plans or parts of the BCM program were being updated. Call trees? Crisis Management Team (CMT) contact information? The IT Technology Recovery Plan (ITTRP) / IT Disaster Recovery Plan (ITDRP). What has been maintained?
There’s a gap with support too, because obviously executives don’t know what they’re doing for the most part and many are stating they were hit with the Covid-19 pandemic disaster by surprise. BULLCRAP!! We saw things coming weeks ago, as the virus began to spread from China to Japan and South Korea and then to other areas. We got the head’s up it was coming but sat by believing it ‘wouldn’t touch us’. Well, they were wrong.
Now the rush seems to be on to ‘mitigate’ and impact but the impact is already here, so they are actually responding to Covid-19. A few week’s ago organizations may have been able to get away with saying they were performing mitigation activities but they can’t now; they’re responding.
Perhaps it’s a way of telling themselves that they aren’t in any way responsible for what’s happening, so they can blame someone else down the road for not being prepared. Saying they are implementing mitigation plans isn’t really true at all; they just don’t want to admit they fell behind. Hence the rush to get a response in place; any response to help with where they are and how they’ve been impacted.
Alex
Covid-19: Did We Learn From SARS?
Well, the Coronavirus has a formal name – Covid-19. Not original by a long shot and even political thoughts went into creating its name (didn’t want to have any regional implications). Still, we now know what to call it. The name might be different but it seems our responses should be roughly the same as they were when SARS hit Continue reading
SARS and Coronavirus: Are We Prepared and Did We Learn from SARS?
I have to admit, though health care professionals have stated that the risk is low for any contamination from the Wuhan Coronavirus, I’m still brought back to the days or SARS in 2003 when panic, confusion and fear of the unknown ran rampant. Continue reading
BCM: Track Your Incidents for Program Maintenance!
When we think of crises or disasters, we seem to immediately go to the big ticket situations; fires, hurricane’s, floods and pandemics. We tend not to think of the smaller mundane crises Continue reading
Preparing for the Unexpected (Oct 24/19): The Role of Social Media in Organizational Resilience
Join us Oct 24/19 as we welcome back Lt Glen Mills to talk about The Role of Social Media in Organizational Resilience.
https://www.voiceamerica.com/episode/116510/the-role-of-social-media-in-organizational-resilience
Enjoy!
The StoneRoad Team
