Search by Topic

Keyword
Industry
Purpose
Expert
Area

HOME Solutions & Services BCM Maturity Level Diagnosis/Consulting Services

Services

BCM Maturity Level Diagnosis/Consulting Services

BCM Maturity Level Diagnosis/Consulting Services *

  • Facebook
  • Twitter
  • LinkedIn

We support your business continuity activities covering all aspects and phases of a business continuity management (BCM) program through the BCM maturity level diagnosis service (complimentary) and the consulting service.

*For your business in Japan.

Overview

BCM maturity level diagnosis service (complimentary)

This is a complimentary diagnosis service that measures your company's preparedness for business continuity. You will be asked to answer some 30 questions. Based on your answers, NRI evaluates the capability maturity and viability of your current BCM program using our unique diagnosis model. Subsequently, you will receive feedback in the form of a summary report.

BCM consulting service

We provide a consulting service covering all aspects of BCP/BCM.

  • BCM assessment
    We identify problems and offer solutions for your current BCM program by reviewing related documents.
  • Building/rebuilding a BCM program
    We provide a range of support services for your BCM program, such as formulating a business continuity plan (BCP), conducting a business impact analysis (BIA), reviewing crisis management strategies, and implementing BCP training.

Clients

Since 2011, we have been providing BCM maturity level diagnosis/consulting services for more than 100 companies in the financial sector (e.g., banks, securities firms, insurance companies and asset managers) as well as the non-financial sector (e.g., manufacturers, information service providers and logistics service providers).

* Our BCM maturity level diagnosis service is not designed for ISO 22301 certification, and does not cover all of its requirements.

Features

BCM maturity level diagnosis service (complimentary)

Multiple-choice questionnaire with less response burden

Previously, when evaluating companies' BCM capability, a conventional approach such as reviewing BCM rules and conducting on-site interviews often places considerable burden on persons who are in charge of BCM operations.
To solve this problem, we employ a close-ended questionnaire for our BCM maturity level diagnosis service that can reduce response burden. You will be asked to answer some 30 carefully selected questions. Based on your answers, NRI will evaluate the capability maturity and viability of your current BCM program, by using our unique diagnosis model developed based on the ISO 22301 framework. You will get our feedback within 10-15 working days after we receive your response to the questionnaire.

Abundant experience in BCM analysis for more than 100 clients, enabling industry comparison

Since 2011, we have been offering the diagnosis service for more than 100 companies and providing advice on their BCM status and solutions for improvements. Under the service, we employ a relative analysis method utilizing our abundant experience in analyzing; our clients can compare their diagnosis results with those of other companies with similar business attributes such as business type, sales volume, number of employees, etc.
The diagnosis is carried out focusing on five domains: "BCM program management", "Understanding your organization", "Formulating business continuity strategies", "Developing and implementing BCM response", and "Exercising, maintaining and reviewing". This approach helps our clients to identify the strengths and weaknesses of their BCM program in each domain.

Evaluate your BCM maturity level on an 18-grade scale

We provide a comprehensive review of your current BCM status on an 18-grade scale, on the basis of capability maturity (six-grade scale) and viability (three-grade scale).

ISO 22301 for business continuity*

In May 2012, the International Organization for Standardization (ISO) published ISO 22301, a new international standard for business continuity management systems. This includes new formal requirements such as "top management leadership and commitment" and "communications availability during a disruptive incident". Responding to the new ISO requirements as well as recent changes to BCM practices, we revised our diagnosis service in July 2013.

For further information on the revised diagnosis service, please click here (http://www.nri.co.jp/info/2013/130717.html (Japanese)).

* Our BCM maturity level diagnosis service is not designed for ISO 22301 certification, and does not cover all of its requirements.

BCM consulting service

Estimation of cost-effective BCM plans, combining with the BCM diagnosis service

Building a BCM program requires considerable costs and its return on investment (ROI) is not easy to estimate. Although there is no typical goal of BCM programs, companies should expect a reasonable ROI. Therefore, there are always questions such as "How much do we need to invest in BCM?" and "To what extent do other companies prepare a BCM program?"
NRI's BCM consulting service offers a comparison analysis with other companies and ROI estimation before and after BCM planning, in combination with the BCM diagnosis service.

Rebuilding your BCM program effectively by identifying weaknesses through BCM assessment

Many companies have already established a certain level of BCM infrastructure; however, in order to maintain a highly viable system, it is necessary to review and revise crisis scenarios and critical business functions, responding to changes in the business environment as needed.
We help our clients rebuild their BCM program effectively by thoroughly identifying weaknesses and problems from an objective perspective and offering proactive solutions in order of priority through our BCM assessment service.

Supporting a viable BCM system

To support our clients in achieving a 'truly viable' BCM system, NRI offers BCM building/rebuilding support service ranging from business continuity planning including policy formulation and documentation to testing and training.

How it works

There are no absolute criteria on which to rely when judging the completeness of a BCM program, as this depends on companies' business characteristics, business environment, management policies, etc. Nevertheless, it is important to understand your competitors' BCM practice.
First, by offering the BCM maturity level diagnosis service that can be carried out in a short time, we help you understand your current BCM status in comparison with other companies and examine possible BCM strategies.
Based on the diagnosis results, we offer the consulting service as needed to support you in assessing the current BCM status, defining business function priorities and conducting BCM training.

Functions

BCM maturity level diagnosis service

You will be asked to answer some 30 questions. Based on your answers, NRI will evaluate the capability maturity and viability of your current BCM program based on the ISO 22301 framework. You will get our feedback in the form of a summary report within 10-15 working days after we receive your response to the questionnaire. We provide this service free of charge.
We comprehensively evaluate your BCM capability on an 18-grade scale, on the basis of capability maturity (six-grade scale) and viability (three-grade scale).
The questionnaire and diagnosis are carried out focusing on the following five domains:

  • BCM program management
  • Understanding your organization
  • Formulating business continuity strategies
  • Developing and implementing BCM response
  • Exercising, maintaining and reviewing

BCM consulting service

We offer the following consulting services for building/rebuilding BCM programs:

  • Assess the current BCM status
  • Establish BCM organizations and operations
  • Formulate business continuity policies
  • Define the business function priorities
  • Conduct crisis simulations
  • Develop and implement BCM response (build alternate sites, prepare BCM rules and manuals)
  • Support BCM training, etc.

Background

BCM

Business continuity management (BCM) is an integrated and comprehensive process firms prepare and implement to ensure uninterrupted continuation of their business operations. BCM incorporates the creation of a business continuity plan and the associated ongoing updates, as well as implementation, management, and revisions.

Although business continuity planning (BCP) and BCM have different meanings throughout the world, the basic difference between the two is as follows:

BCP
(Business Continuity Plan)
BCP ensures business continuity when unexpected events occur by establishing and carrying out a feasible strategy with an understanding of the impact of potential losses. The outcome is documented procedures focused on development, organization, and maintenance for when such events happen.
BCM
(Business Continuity Management)
A comprehensive management process and a framework for an effective plan that creates a capacity to recover and respond in order to protect stakeholder profits, reputation, brands, and value creation work, with an understanding of the potential impact of threats to the organization.

In other words, BCP refers to the business continuity "plan" itself and BCM refers to the overall "management," including how to promote BCP and strategically apply the plan within the company. The Tohoku earthquake and tsunami in 2011 led to a renewed awareness of the importance of holistic BCM that covers all processes ? from strategy to testing and maintenance, including plans, procedures, facilities, resources, and communications. Although continuity plans and procedures were in place for that unforeseen natural disaster, delays in decision-makers' initiating the BCP, inadequate knowledge of alternate procedures for back-up sites, and lack of verification of effectiveness due to little training were some of the reasons that led many corporations to fail to realize that business continuity procedures were, in fact, in place.

BCM standards

Although there are many regulations and guidelines for business continuity, BS 25999, which was developed by the British Standards Institution Group (BSI Group), has received recognition for creating a comprehensive set of guidelines that reflects the majority of the industry's opinions.
BS 25999 is divided into two parts ? Part 1 provides guideline standards and defines the BCM lifecycle concept developed by the Business Continuity Institute (BCI), while Part 2 outlines criteria for certification. As shown in the figure, the BCM lifecycle detailed in Part 1 of BSI Group's guidelines is composed of five domains.

Source) From BS 25999 Part 1

Part 2 also provides a common framework for managing BCM initiatives with the PDCA cycle by way of a management system. Also, "ISO22301," international standards for business continuity management, were published based on Part-2 in May of 2012.

*Unauthorized reproduction or copying of any of the contents of this page is prohibited.
*The contents of this page are current as of April 2019. The specifications and prices of products and services are subject to change without notice. Offers and sales of these products and services are subject to cancellation without notice.

  • Facebook
  • Twitter
  • LinkedIn

Contact Us

Please feel free to contact us for management consultation or any other questions about our consultation services.

Digital Financial Governance Department
Phone: +81-(0)3-5877-7486
E-mail: bcm-info@nri.co.jp