Scaling op risk management for SMIs: Business continuity planning

In the continuing series of scaling operational risk practices, Eric Holmquist looks at how BCP fits into the operational risk management program

In last month’s article, we looked at a special sub-class of operational risk management, the information security programme. This month, we look at the other sub-class of op risk management, business continuity planning (also known as disaster recovery planning, business resumption planning, etc). While the information security programme involves proactive steps to safeguard the bank’s information assets, business continuity planning (BCP) is focused on safeguarding the bank’s operations should