BCM plan documentation becoming more pragmatic
Most organizations integrating vendor resiliency into BCM programs
NEW YORK, August 8, 2013 – As part of their business continuity management (BCM) efforts, companies today are re-thinking their approach to crisis management, but are still behind in leveraging social media as a crucial resource, according to the new Business Continuity Insights Survey by PwC US. The survey, which had approximately 300 respondents, was designed to help gain a better understanding of how business continuity practitioners and stakeholders believe their programs have adapted to a changing environment, and how the practice of business continuity management continues to evolve.
“We are seeing more and more companies using BCM to address items in their risk portfolio, and are spending more time integrating BCM into their enterprise risk management program, versus seeing it as an insurance exercise or IT responsibility,” said Phil Samson, Principal in PwC’s Risk Assurance practice and the firm’s Business Continuity Management service leader. “As they’re starting to think about how to improve crisis communications elements in their BCM programs, we’re finding that some have started to delve into the social media sphere. Yet, the majority is still hesitant about utilizing social media as a crisis management tool.”
According to PwC’s survey, more than half of the respondents – 57 percent – do not officially use social media as a crisis management resource. For companies that have begun integrating social media into their crisis management efforts – Facebook and Twitter cited the most often – not all are seeing improvement in their capabilities. Thirty-eight percent of survey respondents are modestly leveraging it as a tool, but not necessarily seeing improvements in their capabilities, whereas eight percent of respondents believe that social media has become an enabler for their organization to proactively identify and respond to crisis events.
“There is some uncertainty around adopting social media as companies are weighing the possible risks and legal complications, and are not seeing how it can be used to help expedite communications during a crisis,” continued Samson. “As social media’s use in an organization becomes more pervasive and management grows more comfortable with its use, BCM programs will naturally begin to adopt social media for internal and external crisis communications. We’re telling our clients that they must first look through their crisis communication plan for ways to use social media as an effective communication channel to employees, key third parties, customers and stakeholders. Then, they should look at the more likely crisis and risk scenarios and determine if social media could be used to facilitate crisis identification, internal and external communications, and recovery coordination efforts.”
Although companies are still finding it challenging to better integrate global/regional locations beyond corporate and headquarter sites into their overall crisis management process, the majority of PwC’s survey respondents highlighted that documenting their BCM plans have become more pragmatic and user friendly, allowing more flexibility into responsiveness. “Companies are now starting to see that they no longer have to grasp for new ways to structure their BCM programs to get leadership buy-in. By showing the leadership the various enterprise-wide negative impacts of the more likely interruption scenarios, management will engage in moving the BCM program forward,” said Samson.
Quite a few of PwC’s respondents noted that vendor resiliency is being integrated into BCM programs - 64 percent of respondents are involving one or more critical third parties as part of their organizations’ BCM programs, and 83 percent of these respondents are involved in identifying and planning for a loss of third parties. While about half of the respondents either do not manage or assess vendor resiliency, or do so in a silo fashion, 44 percent of companies are attempting to manage vendor resiliency within a centralized function, as a slight majority of these companies have seen an increase in BCM inquiries from their key customers.
“In the past, companies built a structured script and walked through a specific scenario, but now they are realizing that real life crisis events don’t happen that way. They are now looking at how to make crisis management plans much more flexible a nd capable of handling longer lasting crisis events” said Samson. “Further, the increased emphasis on risk management as an organization-wide initiative has continued to drive collateral improvements within BCM. Management is beginning to align BCM to broader organizational risk initiatives, as well as observing the benefits of imbedding a ‘culture’ of continuity and resiliency within everyday business processes.”
To hear a replay of the BCM webcast on the survey findings, please visit: https://event.on24.com/eventRegistration/EventLobbyServlet?target=registration.jsp&eventid=641704&sessionid=1&key=D7B26A945E9F5115D5202CDA0A9058C8&sourcepage=register
About PwC’s Risk Assurance practice
PwC understands that significant risk is rarely confined to discrete areas within an organization. Rather, most significant risks have a wide-ranging impact across the organization. As a result, PwC's Risk Assurance practice has developed a holistic approach to risk that protects business, facilitates strategic decision making and enhances efficiency. This approach is complemented by the extensive risk and controls technical knowledge and sector-specific experience of its Risk Assurance professionals. The end result is a risk solution tailored to meet the unique needs of clients.
About PwC US
PwC US helps organizations and individuals create the value they're looking for. We're a member of the PwC network of firms in 158 countries with more than 180,000 people. We're committed to delivering quality in assurance, tax and advisory services. Tell us what matters to you and find out more by visiting us at www.pwc.com/US.
© 2013 PricewaterhouseCoopers LLP, a Delaware limited liability partnership. All rights reserved. PwC refers to the US member firm, and may sometimes refer to the PwC network. Each member firm is a separate legal entity. Please see www.pwc.com/structure for further details.