CONTINUITY · CONSULTING SERVICES
Keep operating on the day it goes wrong
A business continuity management system built to ISO 22301: a Business Impact Analysis tuned to financial operations and industrial processes, a continuity strategy, BCP and DRP plans written for the people who will use them, facilitated test exercises, and a certification-readiness review — so the gaps are found in an exercise rather than during a real outage.
ENGAGEMENT AT A GLANCE
ScopeIT services and OT/production processes
StandardISO 22301:2019
OutputBCMS + exercised recovery plans
YOU RECEIVE
BCMS scope statement and continuity policy
Business Impact Analysis with RTO and RPO per activity
BCP and DRP plans for each priority activity, IT and OT
Facilitated test exercises with documented results
Certification-readiness review
WHAT'S COVERED
Scope of the engagement
01
BCMS scope
Which entities, sites, IT services and production processes the management system covers, and the interested parties it has to answer to.
02
Business Impact Analysis
What each process costs you per hour of downtime and the recovery objectives that follow from that — with a methodology tuned to financial operations and industrial processes.
03
Continuity strategy
The options for each priority activity — workaround, alternate site, standby capacity — costed against the recovery time it has to meet.
04
BCP & DRP plans
Documented continuity and recovery plans, an incident management structure, and communications that still work when the usual channels are the thing that failed.
05
OT failover & manual operations
Continuity for production: failover of control systems and the manual-operations procedures that keep a plant running safely while they are down.
06
Exercise & certification readiness
Facilitated tabletop and live exercises that genuinely test the plans, findings fed back into them, and a readiness review before the certification body arrives.
COMMON QUESTIONS
Before you ask
Do you issue the certificate?
No. Certification comes from an accredited certification body, and no consultancy can both build the management system and certify it. We build it and stand beside you at the audit.
How is this different from disaster recovery?
Disaster recovery restores technology. ISO 22301 asks how the business keeps delivering while the technology is down — which usually turns out to involve people, premises and suppliers at least as much as systems.
Does it cover our production and OT environment?
Yes. The Business Impact Analysis covers industrial processes as well as IT services, and the plans include OT failover and manual-operations continuity — how the plant keeps running safely while the control systems are down.
THE DELIVERABLE
What lands on your desk at the end
Before you sign, ask us exactly what the report contains — it is the fastest way to judge whether the work is worth buying.
REPORT CONTENTS
Gap assessment against ISO 22301 clauses, with evidence status
Business Impact Analysis with agreed RTO and RPO per activity
Continuity strategy options, costed against recovery objectives
BCP and DRP plan set, written for the people who use them
Exercise programme, results and certification-readiness review
WHAT WE NEED FROM YOU
Executive sponsor with authority to approve recovery objectives
Process owners for each activity in scope, IT and production
Existing DR plans, supplier contracts and site information
A target certification date to work back from
FRAMEWORKS THIS EVIDENCES
ISO 22301:2019ISO/TS 22317 (BIA)ISO/IEC 27001:2022 Annex A
Findings are mapped to control references so the report can be handed to an auditor without translation.
Ready to secure your business?
Book a consultation with our engineers. Bring your architecture and your constraints — we'll tell you what we would do first, and why.
WHAT A CONSULTATION LOOKS LIKE
01
A conversation with an engineer
Not a sales call. Bring your architecture and your constraints.
02
A written gap summary
Prioritised, with what we would do first and why.
03
No obligation, no follow-up sequence
If it is not a fit we will say so on the call.
Not ready to talk? See the company facts — entity details, offices and our NTRA certification.
One inbox, answered by an engineer — not a routing queue.