We immediately undertook several investigations into the client’s business processes. Firstly, we performed a GAP analysis of the client’s BCP and DR systems, comparing to the industry standards. This thorough analysis involved discussions with a wide network of cross-organisation stakeholders and comparing with successful systems. During this investigation, we identified a need to partner with the client’s internal risk, service management and change, and incident management teams who had not previously been integrated into the existing BCP/DR considerations. This realisation proved key to improving communication and effectiveness of protocols. We also identified numerous unaccounted risks such as insufficient business impact analysis, and a general lack of sufficient planning for unforeseen events.
To investigate the commercial contracts, we performed an in-depth review of a selection of critical contracts, looking at historic expenditure, communication of requirements, and actual value delivery. We acted to consolidate contractual risks and provided a prioritised list of crucial considerations. Regarding staff competency levels, we looked at the training of the in-house team by meeting with the BCP management team and comparing training levels with industry standards.