
Guest Post byĀ Geary SikichĀ (first posted on CERMĀ Ā® RISK INSIGHTS ā reposted here with permission)
The post-crisis recovery phase is one of the least addressed in planning, training and simulations.Ā This is an area that, if not properly managed, can cost financially, reputationally and operationally.Ā Communications, internal and external are, at best, misjudged.Ā Guidelines for recovery are lacking and most entities lose focus when it comes to discussing recovery operations.Ā It may be that recovery is one of the most complicated of the lifecycle elements and that no two recoveries are going to follow the same pattern.Ā
However, the recovery process can be segmented into manageable bits that can be undertaken using a project management approach.
Business Continuity Lifecycle ā A Perspective on Recovery
Figure 1, entitled, āBusiness Continuity Lifecycleā provides a top level graphic depiction of the typical cycle of event response, management, recovery and resumption of operations.Ā I have added the emergency response and crisis management elements as they intermingle with business continuity.Ā I have simplified the cycle to four major transition points.Ā Transition point 1 is the reactive response phase, where we react to events and invoke emergency response actions.Ā This phase is characterized by activation, reactive response and chaos control.
Transition point 2, I have titled āUnplanned Disruptionā.Ā This is the phase where we begin to identify and address the unplanned developments that result from the event and the reactive response to the event.Ā Unplanned disruption would include those elements of surprise that the planning effort did not directly address or completely overlooked.Ā During this phase it is possible that crisis management becomes the lead element in the business continuity process.
Transition point 3, I have titled āPlanned Disruptionā.Ā It is in this phase that the plan is actually working as it was written (well perhaps).Ā This phase is critical to recovery as the recovery planning, based on actual reentry assessment activities, should commence and the recovery team should be transitioned in to the organization.
Transition point 4, I have titled āTerminationā.Ā It is in this phase that recovery activities are in full swing.Ā Restoration and resumption of business operations are underway.Ā The resumption activities may still be conducted at an alternate location (if an evacuation has occurred).Ā During this phase the recovery team is moving dislocated units, entities, etc. back to the normal work area.Ā It is critical in this phase to get it ārightā so that the transition back does not create a new event/crisis.Ā Note that on figure 1, I have differentiated the Recovery Management aspect, as well as the āBusiness Recoveryā and the āSystems/Information Recoveryā activities.
Business Recovery involves more than the recovery of systems/information.Ā Activities, such as Finance, Marketing, Legal, Production, internal support and external support (āValue Chainā) have to be reset and integrated back into the organization.Ā Depending on the severity of the event, realignment of operations, reorganization and resetting of corporate goals/objectives may be necessary.Ā While too numerous to delineate in this space, one should have a plan that outlines the functions and areas within the organization.Ā This plan should establish timelines for recovery of these activities and reintegration into the business operation.Ā To ensure smooth transition from event termination to recovery and resumption of ānormal businessā operations a touchpoint assessment should be part of the recovery process.Ā This assessment would identify the various touchpoints that major units have in order to incorporate them into the recovery timeline.Ā For example, if a production unit is coming back on line and new or altered processes are being put in place; training may be required for operators/staff.Ā The touchpoint with Human Resources would be the training program and certification of staff to operate in the new/altered environment.
Concluding Thoughts
While I have highlighted some aspects of the recovery process in this brief article, I think it is necessary to offer a suggestion regarding recovery plan validation activities.Ā Some may use the term ādrills and exercisesā or āsimulationsā or āwar gamingā to describe the validation process.Ā Designing, developing and implementing a āRecovery Exerciseā is, in my experience, a very rare occurrence.Ā I would recommend that planners take a moment to assess the actual recovery capabilities of their organization.Ā Design, develop and implement a drill or exercise; whether tabletop or full scale, to see if recovery operations can actually be undertaken and carried out as described in the plan or in the thought process of the organization.Ā This is an ideal situation for involving the public sector and the āValue Chainā components within your planning framework.Ā The focus should be on identification of flawed decisions to establish a context for correcting flaws within the risk assessment, business impact assessment process.
About the Author
Geary Sikich ā Entrepreneur, consultant, author and business lecturer
Contact Information: E-mail: G.Sikich@att.net or gsikich@logicalmanagement.com.Ā Telephone: 1- 219-922-7718.
Geary Sikich is a seasoned risk management professional who advises private and public sector executives to develop risk buffering strategies to protect their asset base.Ā With a M.Ed. in Counseling and Guidance, Gearyās focus is human capital: what people think, who they are, what they need and how they communicate. With over 25 years in management consulting as a trusted advisor, crisis manager, senior executive and educator, Geary brings unprecedented value to clients worldwide.
He holds a B.S. in Criminology from Indiana State University and a M.Ed., in Counseling & Guidance from the University of Texas at El Paso.Ā A well-known author, his books and articles are readily available on Amazon, Barnes & Noble and the Internet.
Leave a Reply