Your plans are in place and you’ve got sign off at every level. But deep down you know that the plans aren’t up to scratch and significant risks are not being addressed. Is this enough?
I’m not trying to introduce the usual FUD (Fear, Uncertainty and Doubt) but simply trying to point out that the responsibility of the continuity participants is to build a resilient organisation. I do get the feeling that in some organisations the tick box culture is incredibly strong. If the executive actually wanted just a tick in the box then why bother in the first place. I would contend that getting a tick in the box and doing it right in the first place probably costs the business much the same.
For arguments sake, let us say that a risk in your business continuity and lack of planning caused a death to occur. You are of course not directly responsible, but did you do everything in your power to prevent it. Standing in front of the judge shaking a piece of paper saying that you had a paper trail is not going to save you (at least not here in the UK), especially once his worship askes if you knew your plans were inadequate.
If your in this position, firstly you are not alone. The answer is simple, work out a process that would work in the interests of your organisation and start doing that.
Related posts:
Recent Comments