- Many problems happen because everyone thought that someone else was responsible for the area that failed. The Business Continuity Management (BCM) awareness program should emphasize the responsibility of everyone to manage threats in their areas and should seek ideas from the staff to add strength to the plan.
- Risk Management and BCM need to work as partners. This can be achieved by the use of clearly defined language. An example would be ‘critical activity’.
- Senior management needs to know what to expect from the start. Educate senior management to accept the qualitative nature of risk assessments.
- Engage the right outside experts. Make use of the available external assistance from insurance brokers, consultants, emergency services and civil authorities.
- Involve everyone in the process. Effective and resilient response results as much from shared deep business knowledge as from technical facilities and procedures.