Trending in Bu siness Continuity · 2015-10-15 · Trending in Bu Prepared by BC Management, Inc. - June 2012 siness Continuity An Assessment of Data Collected Between 2009 – 2011

Prepared by BC

Management, Inc.

- June 2012

Trending in Business Continuity An Assessment of Data Collected Between

2009 – 2011 EXCERPT – NOT COMPLETE REPORT

Benchmarking. Plan Ahead. Be Ahead.

Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 2

Table of Contents – SUMMARY INCLUDED ONLY – DATA FIGURES REMOVED

Welcome 3

Summary of Data Findings 3-5

Trends of Interest within the Business Continuity Profession 6-24

Corporate Integration of Business Continuity

IT/ disaster recovery & business continuity strategies adequately supporting organizations 6

Disciplines managed within the business continuity program 7-8

Integration of program with other organizational disciplines 9-10

Status of current program 11

Budgeting

Budgeting of expenses within organization 12

Approximate annual budget for contingency related program expenses 12

Budget revisions 13

Personnel

Current dedicated personnel 13

Hiring initiatives for the next year 14

Reduction of full-time, permanently employed personnel in the next year 14

Primary reason behind a reduction in force in the next year 15

Organizational Reporting Structure

Reporting structure – department owner for business continuity 16

Is the business continuity program positioned for maximum visibility by department owner 17

Program Sponsor

Assessment by job title on who is totally engaged and sponsoring the program 18

Sponsor’s level of engagement if a chief officer level or above 19

Technology Recovery Solutions

Utilization of third-party hot site/ alternate site technology providers 20

Considering an internal recovery capability 20

Vendor Utilization

Utilization of software planning tools, automated notification tools and/or mobile recovery solutions

21

Reasons for Planning, Regulatory Requirements & Organizational Certification

Primary reasons for developing and maintaining a program – “Priority” or “High Priority” 22

Regulatory requirements and/or standards to model program after – “Priority” or “High Priority”

23

Achieved certification in an organizational standard 24

Organizational standard achieved certification in 24

Participant Data & Respondent Characteristics ~ An overview of international respondent characteristics. 25-29

Reporting History, Study Methodology, Assessment of Data & Reporting 30-31

Thank you to BC Management’s International Benchmarking Advisory Board 31

Thank you to our Sponsors and those Organizations who Distributed the Study and/or Report 31

About BC Management, Inc. & Where to Download Complimentary Business Continuity Management Compensation Reports

32

Customize a Report Exclusively for your Organization 32-33


SUMMARY

How to Read the Report

The Business Continuity Trending Report is designed to provide a summary of the wealth of data collected

from nearly 3000 respondents to BC Management’s Internat ional Business Continuity Management survey as

i t pertains to trend analysis. This report wi l l serve as a resource in assessing and understanding the

d irection of the business cont inuity management profession.

Highlighted throughout this report are a var iety of business cont inuity program management init iat ives that

showed the most noteworthy changes between 2009 and 2011. This is the f irst report of i ts kind and BC

Management is able to offer such a report as a result of data analysis from three consecutive years of an

identical survey.

Findings Business Continuity Management Program Advancements

In assessing the data results between 2009 and 2011 we noticed the following business continuity management program

advancements that indicate a shift to an enterprise-wide resiliency focus with increased executive support and acknowledgement of

increased standards that will more than likely continue to evolve the profession in the future.

More respondents indicated that the business continuity program and/or the disaster recovery program is meeting the

organizational needs of the corporation.

Increase in the number of disciplines managed within the business continuity management program with crisis

management, emergency management and risk management showing the greatest increase.

Improved integration of the business continuity management program with other corporate functions with security-

information, information technology, emergency management, disaster recovery (IT focus) and crisis management showing

the greatest improvement.

Adding more full-time, permanent personnel dedicated to the program and a decrease in downsizing of personnel in the

next year.

The business continuity office showed the most significant gain of where to position the program when assessing the

department owner and organizational structure.

Risk management and the business continuity office received the highest approval ratings of where to position the program

from a department/ organizational structure review.

Increased awareness seems to be evident at the chief officer level as more respondents indicated a shift in program

sponsor from mid management/ management to the chief officer level/ board committee.

The chief level program sponsors are stepping up their level of engagement with the business continuity management

program.

More respondents noted several standards/ regulations to model their business continuity program after as a high priority.

Advancement of organizational certifications as more respondents noted to obtaining multiple organizational certifications.

EXCERPT – NOT COMPLETE REPORT

ONLY SUMMARY OF THE REPORT HAS BEEN INCUDED

ALL DATA FIGURES HAVE BEEN REMOVED

ORDER A BCM TRENDING REPORT or INQUIRE VIA [email protected]

http://www.bcmanagement.com/program-management-research-data.html

mailto:[email protected]


Business Continuity Management Program Deteriorations

Our study pointed to a few disappointing data points that center on budgeting of the business continuity management program. We

can assess that this is more than likely due to the deep recession, especially since this trend analysis is between the timeframe of

2009 to 2011. Corporations around the world are understandably cost conscious, thus the following data findings were not

surprising.

A shift was indicated as to how business continuity is being budgeted within corporations from being allocated

independently to having no defined budget.

Severe cuts in business continuity management program budgets were noted between 2009 and 2011.

The most significant budget decrease was for those respondents who tied their business continuity management budget to

other corporate departments.

Other Business Continuity Management Program Notable Trends

Our data analysis indicated other noteworthy business continuity management trends. These trends could be viewed as having a

positive, negative or neutral impact to the future of the business continuity management profession.

The 2011 study showed that more respondents indicated no change to the business continuity management program

budget in the next year.

There was a significant decrease in the number of part-time dedicated personnel to the business continuity management

program while full-time dedicated personnel showed consistency.

Those corporations who are downsizing the dedicated business continuity personnel indicated increased drivers between

2009 and 2011 to be a change in priorities, reduction in scope of work and transfer of functions. The most significant

drivers in 2009 (financial pressures and organizational restructuring) did diminish substantially, although the data results

still indicated these factors as considerable.

Increase of respondents who noted a mix recovery solution between a third party hot site/ alternate site vendor and

internal recovery solution as well as an increase of respondents who noted an internal solution at an alternate site. At the

same time, those respondents who noted an exclusive use of a third party hot site/ alternate site vendor for their recovery

solution declined.

Slight increase in utilization of software and notification provider tools between 2009 and 2011.

More respondents noted the following as a high priority for reasons to develop and maintain a business continuity

management program.

o Ensure safety of employees

o Be compliant with good corporate governance

o Response to audit results/recommendations

o History of business interruptions


Using the Data How Can this Report Benefit Your Program and Your Organization?

What is the take away?

This report is a compilation of all the data provided in the 2009, 2010 and 2011 studies. Our summary is a broad analysis of a

segment of the data offering an illustration of how the business continuity profession is viewed and what we can learn from these

study results. This is simply a baseline of the trends in our industry. Our hope is that you can use it as a starting point, if not a guide

as you work towards gaining executive support and establishing metrics to better measure the effectiveness of your program. The

report can be leveraged to provide you with facts to present to your executive management to help justify continued emphasis in

key areas of your business continuity program. But don’t forget, as professionals in this industry, the report also offers insight into

career development opportunities that you should use to identify areas to further develop your own skills.

As you continue on your journey consider benchmarking your organization against your peers. Enclosed you will find a great deal of

data, though it is impossible to display everything, which is why the customized reporting by organization will be essential if an

organization wants to obtain a clear understanding of other “similar” organizations. A feature of the customized reports is providing

a detailed analysis specific to your industry which not only allows you to benchmark your own program against very mature

programs specific to your demographics, but also is an opportunity to create a roadmap for your program based on effective peer-

based models and supporting data.


Corporate Integration of Business Continuity

Study Question - To your knowledge, do you feel your current IT/Disaster Recovery and Business

Continuity strategies adequately support the needs of your organization? (An assessment of all

study respondents.)


BC Management’s study inquired on how many and which disciplines are managed within the business continuity

management program. The purpose of this question is to assess how business continuity is managed within

organizations, meaning which disciplines are commonly paired within a business continuity/ disaster recovery

management program and how many functions is a business continuity/ disaster recovery manager commonly

overseeing.

Study Question – Please specify all the disciplines that you personally manage within your

program. Select all that apply. (An assessment of study respondents.)


The two data graphs below highlight the percent of respondents who indicated “No Integration” and “Completely

Integrated” in 2009, 2010 and 2011 for the disciplines noted. Several categories were not included in the 2009 BCM

Study (Business Unit Participation, Change Management, Executive Protection, Media Crisis Management, Pandemic

Planning, Privacy, Senior Management Participation/ Sponsorship and Strategic Plan/ Corporate Mission Statement). In

reviewing the results from the previous three previous studies, we discovered that the following disciplines showed

improvement: Security- Information, Information Technology, Emergency Management, Disaster Recovery (IT Focus)

and Crisis Management.

Study Question - How well integrated are the following within your organizational program?

Please rate on a scale of 1 to 5 with 1 meaning NO INTEGRATION and 5 meaning COMPLETELY

INTEGRATED. (An assessment of all study respondents.) *All related enterprise discipl ines are l isted within the study to accommodate a variety of discipline expertise .


Study Question - Please choose all that apply to describe your organization’s current continuity program status under your direction and management. Please check all that app ly. (An assessment of all study respondents.) * “% of Resp” column will exceed 100% due to multiple selections.


Budgeting

Describe how continuity program expenses are budgeted under your direction and management?

(An assessment of all study respondents.)

Study Question – What is your company’s approximate annual budget for contingency related

program expenses? (An assessment of all study respondents.)


Data figure above indicates that more respondents are indicating no changes in the program budget versus decreasing

the budget. This would seem to indicate that those corporations that are cutting budgets are doing so drastically since

the budgets decreased in the previous graph.

Study Question - Please specify budget revisions for the next year for each budget line item –

Increase, Decrease, Unchanged, or Not Sure. (An assessment of all study respondents.)

Personnel

Study Question - Please indicate how many full -time employees (FTE) and/ or part-time

employees (PTE) you have dedicated to your continuity program? Please confirm that the

number below is the total FTE and PTE headcount for all locations under your direction and

management. (Auto-sum function built into study.) (An assessment of all study respondents.)


Study Question -How many full-time employees (FTE) and/ or part-time employees (PTE)

dedicated to the continuity program you plan to hire in the next year? Please confirm that the

number below is the total number of proposed new personnel for all locations under your

direction and management. (Auto-sum function built into study.) (An assessment of all study

respondents.)

Study Question - Will you be reducing your full -time dedicated continuity program staff in the

next year under your direction and management? (An assessment of all study respondents.)


Study Question - If yes, what are the reasons for reducing your dedicated contin uity program

staff in the next year? Please select all that apply. (An assessment of all study respondents.) * Total percent may exceed 100% due to multiple selections.


Organizational Reporting Structure

Study Question - Which department best describes the reporting structure of your program

under your direction and management? Please select the best response from the following

departments. (An assessment of all study respondents.)


Study Question – Under the current department ownership, do you agree that the continuity

program is best situated within your organization for maximum visibility? Selection ch oices

include strongly disagree, disagree, neutral, agree and strongly agree. (An assessment of all

study respondents.)


Program Sponsorship

Study Question - Please specify by job title who is totally engaged and sponsoring the continuity

program functions. Please select the best response. (An assessment of all study respondents.)


Study Question - If the program is being sponsored by a Chief Officer or above, is this person

really engaged in your opinion? Rate on a scale of 1 to 5 with 1 meaning Very Little Involvement

and 5 meaning Very Involve. (An assessment of all study respondents.)


Technology Recovery Solutions

Study Question - Do you contract with a third-party hot site/ alternate site technology

recovery vendor under your direction and management? (An assessment of all study

respondents.)

.


Vendor Utilization

Do you utilize software planning tools , automated emergency notification tools, or mobile

recovery solutions to assist with your Business Continuity Management program initiatives under

your direction and management? (An assessment of all study respondents.)


Reasons for Planning, Regulatory Requirements & Organizational Certification

Study Question - Please rate the following primary reasons for developing & maintaining a

program on a scale from 1 to 5 with 1 meaning LOW PRIORITY and 5 meaning HIGH PRIORITY.

(An assessment of all study respondents.)


Study Question - What regulatory requirement and/ or standard do yo u model your Business

Continuity Management program after. Rate on a scale of 1 to 5 with 1 meaning LOW PRIORITY

and 5 meaning HIGH PRIORITY. Please include Not Applicable (N/A) if the regulatory

requirement and/or standard do not apply to your organizat ion. (An assessment of all study

respondents.)


Study Question - Has your organization achieved certification in a standard? (An assessment of

all study respondents.)

Study Question - If yes, please select which standard(s) your organization has achieved

certification. Please select all that apply. (An assessment of all study respondents.) - Total percent may exceed 100% due to multiple selections.


3,152 study participants from over 50 countries as of December 15, 2011. Incomplete/ partial study responses were included as

appropriate within the report. Study was divided into 2 sections.

Business Continuity Compensation – 1,783 professionals participated in the compensation section from 59 countries. Incomplete study responses were included within this report along with the completed responses.

Business Continuity Program Management – 904 professionals participated in the program management section from 37 countries. Incomplete study responses were included within this report along with the completed responses.

Complete responses were received from the following countries: Australia, Belgium, Brazil, Canada, Cayman Islands, China,

Colombia, Denmark, Egypt, France, Germany, Honduras, India, Ireland, Italy, Japan, Kuwait, Malaysia, Malta, Mexico, Netherlands,

New Zealand, Norway, Pakistan, Philippines, Portugal, Qatar, Saudi Arabia, Singapore, South Africa, Sweden, Switzerland, United

Arab Emirates, United Kingdom, United States of America and Venezuela.

International Respondent Characteristics = 3,152 Study Respondents

Company Revenues span from non-profit/ government to over $400 Billion USD.

Study respondents span over 45 industries.

Average Number of Company Locations (Corporate/ Operational) = 16-25 Company Locations span from 0-5 Locations to more than 10,000.

Average Number of Company Locations (Retail/ Customer Interfacing) = 26-50 Company Locations span from 0-5 Locations to more than 10,000.

Average Number of Employees = 5,000 – 10,000 Company Employees span from 0-5 to more than 400,000.

Majority of respondents (61%) managed 5+ disciplines within their program.

Less than $10M, 17%

$10 - $50M, 7%

$50 - $100M, 3%

$100 - $500M, 10%

$500M - $1B, 8%$1 - $10B, 26%

$10 - $20B, 6%

$20 - $50B, 4%

Over $50B, 18%

Revenue in USD

International Participant Data & Respondent Characteristics Continued

International Participant Data & Respondent Characteristics





Those respondents who noted “Do not

manage a program” were exited from

study.


Since 2001 BC Management, Inc. has been gathering data on business continuity management programs and compensations to

provide professionals with the information they need to elevate their programs. Each year our organization strives to improve upon

the study questions, distribution of the study, and the reporting of the data collected. Below is a timeline detailing BC

Management’s eight years of business continuity reporting expertise.

* The advisory board is composed of 21 international thought leaders coming from the United States of America, Canada, Latin America, the United

Kingdom, Singapore, Australia, China, Japan, India, Middle East, Eastern Europe and Africa. Our board is comprised of professionals in not only business

continuity, but also risk management, emergency management, high availability and environmental health and safety.

The on-line study was developed by the BC Management team in conjunction with the BC Management International Benchmarking

Advisory Board. WorldAPP Key Survey, an independent company from BC Management, maintains the study and assesses the data

collected. The study was launched in May of 2011 and the study remained open through December 2011. Participants were

notified of the study primarily through e-newsletters and notifications from BC Management and from many other industry

organizations. A listing of participating organizations is included within this report. The study has been translated in five languages

and it accommodates professionals who are permanently employed on a full-time or part-time basis, self-employed as an

independent contractor or unemployed. Respondents receive a unique path of branching questions, which is dependent upon their

experience and employment status. The study is coded with extensive logic to ensure a correct question branching path and to

eliminate unintelligible data. It is comprised of two sections spanning over 100 questions. The first section focuses on the factors

that impact compensations within the business continuity and related professions. The second section focuses on business

continuity program management initiatives, which includes budgets, dedicated personnel, organizational reporting structure,

maturity of the program, exercises, auditing, vendor utilization, program activation during an event and much more. Respondents

to the study have the option to complete one or both sections. Only those respondents who manage a program within business

continuity or a related discipline qualify to complete the program management portion of the study. All participants are given the

option of keeping their identity confidential.

Reporting History

Study Methodology


BC Management is continuously reviewing and verifying the data points received in the study. Data points in question are confirmed

by contacting the respondent that completed that study. If the respondent did not include their contact information, than their

response to the study may be removed. With our eight years of expertise in collecting and assessing such data points, BC

Management has an exceptional understanding of what is considered questionable or unintelligible data. To date BC Management

has contacted over 200 professionals to confirm their individual study response. We then have the ability to log into the

respondent’s study and update their answers on their behalf to ensure valid data points.

WorldAPP Key Survey built a customized reporting tool for BC Management, which enables us to quickly assess data and prepare

reports. We have the ability to prepare reports with no data filtering or analyze the data in applying any combination of filters from

any of the study questions. Data findings in many of the figures were rounded to whole numbers, thus the total percent may not

equal 100%.

BC Management’s International Benchmarking Advisory Board was instrumental in reviewing the study to ensure it focused on the

topics that are of the greatest interest to continuity professionals today. The goal was to develop a credible reporting tool that

would add value to the business continuity profession. A full listing of board members and bios is available on the complimentary

BCM Compensation Report and made available to those respondents who completed the BCM Annual Study.

A special thanks to our sponsoring organizations that assisted in translating our study. Without these organizations the study may

not have been available in Chinese, Japanese and Spanish.

Distributing Organizations

BC Management also greatly appreciates the efforts of those organizations that assisted in this global effort. The contribution of

each individual organization does not indicate an endorsement of the study findings or the activities of BC Management, Inc. A full

listing of distributing organizations is available on the complimentary BCM Compensation Report and made available to those

respondents who completed the BCM Annual Study.

Assessment of Data & Reporting

Thank you to BC Management’s International Benchmarking Advisory Board

Thank you to our sponsors and organizations that assisted with this global effort

Global Data Solutions LTD

Sponsored the Chinese translation

Risk Managers and Consultants Association

Sponsored the Japanese translation

MiaTomi

Sponsored the Spanish translation


BC Management, Inc., founded in 2000, is an executive staffing and research firm solely dedicated to the business continuity,

disaster recovery, risk management, emergency management, crisis management and information security professions. With

decades of industry expertise, our staff has a unique understanding of the challenges professionals face with hiring, benchmarking

and analyzing best practices within these niche fields.

BC Management’s Complimentary Research - BC Management has been collecting data on the factors that impact compensations

and business continuity programs since 2001. To download our current complimentary reports please visit

www.bcmanagement.com.

We Value Your Comments - Thank you for participating in our annual study. Your contribution adds value to our comprehensive

reporting and allows us the opportunity to assess industry trends. Please share any comments or suggestions on how we can

improve at [email protected].

As a result of our advancement in reporting technology with World APP Key Survey, BC Management is able to offer a true

benchmarking service exclusively for the business continuity management profession. Our benchmarking service includes a report

(similar to this report) customized to your specific filters used to drill down to the data points that compare to your compensations

or program planning initiatives. As a part of our benchmarking service, BC Management is also offering a business intelligence

dashboard technology in which you will receive all the data points (based on your filter specifications) for further independent

assessment. This technology will allow your organization to further assess the data within a flexible, intelligent, user friendly format.

Obtain information on our comprehensive Business Continuity research reporting.

COMPENSATION RESEARCH DATA:

Benefits of Our Customized Compensation Benchmarking Service

Saves time and money in assessing compensations for current and future personnel. Provides a fair comparison on compensation bands based on expertise, degree, certification and geography. Assists in retaining current personnel based on compensations in the same geography and job title.

Filters Available to Customize Your Compensation Report

Employment Status – may choose from full-time permanent, part-time permanent, independent contractor and unemployed.

Geography – may choose country, state/providence, or city.

Job Title/ Position – may choose from a selection of job titles.

Discipline – may choose multiple disciplines that are managed with the program (17 to choose from).

Years of Experience – may choose from an experience band of your choice.

PROGRAM MANAGEMENT RESEARCH DATA:

Benefits of Our Customized Program Management Benchmarking Service

Allows you to assess the maturity of your business continuity program focusing on industry best practices, dedicated staff, budget breakouts, reporting structure, vendor utilization, program activation and much more.

Provides assistance in presenting business case objectives to your executives to substantiate and expand your program. Prioritizes key initiatives in elevating the maturity of your programs. Assists in building a road map to advance your program and meet your goals. Makes you more efficient by eliminating the need to do research on your own.

Customize Your Compensation and/or Program Management Benchmarking Report

About BC Management, Inc.

http://www.bcmanagement.com/


http://www.bcmanagement.com/comprehensive-reports.html


Provides an unbiased source on how your company compares to the industry; specifically other “like” organizations, which can be used to support your recommendations.

Filters Available to Customize Your Program Management Report

Industry – may choose more than one industry. Company Revenue – may choose a revenue band of your choice. Number of Employees – may choose a selection from number of company employees. Number of Locations – may choose a selection from number of company locations in either operational and/or retail

interfacing. Geographic Distribution – may choose multiple countries as well as how the company locations are dispersed (global, multi-

country, one country, regionally within one country, statewide or citywide). Disciplines within program – may choose multiple disciplines that are managed with the program (17 to choose from). Scope of program – may choose a combination of the following: global, multi-country, one country or regionally within one

country. Maturity Rating of Program – may choose on a scale of 1 to 5 with 1 being Very Immature and 5 being Very Mature (please

note this is a self rating by the study participant). Names of Organization – may choose a list of company names that have participated in our study and completed the

program management portion of the study. Please keep in mind that not all respondents indicated their company name. Many respondents kept their organizational name private. Also, not all study respondents qualified for the program management portion of the study. Only those respondents who managed a program were encouraged to participate in the second section of the study. ALL RESPONDENT CONTACT INFORMATION IS KEPT CONFIDENTIAL AND IS NEVER REVEALED!

Inquiries

For more information or to order a report please email us at [email protected] or call us at (714) 969-8006 or toll free

within the United States (888) 250-7001


Documents

Trending in Bu siness Continuity · 2015-10-15 · Trending in Bu Prepared by BC Management, Inc. - June 2012 siness Continuity An Assessment of Data Collected Between 2009 – 2011