Corporate Policies -- Governance & Compliance

Resiliency goals can be analyzed and established in a structured and controlled program, or less formally by practice. Either way, they should be documented and communicated to all key personnel. The organization must be able to plan and measure progress and investments against stated resiliency objectives. The goals must be translated into objectives for safety, service, response and availability commitments of the business. These objectives must align not only with the overall resiliency goals and budgets established, but must also meet all internal and external compliance requirements for the business. A Governance and Compliance model will translate the corporate goals and policies into manageable metrics and required reporting for the entities within the enterprise. Then, the program manager will define the organizational elements, quantify the objectives, establish the measurement criteria and set up the operational program elements.

Program Management sets the parameters, manages the work to be performed, tracks the progress, audits the results, and generates status reports on a programmed basis. The success and long-term viability of enterprise resiliency relies on a well managed system of checks and balances within a program focused on business resiliency to prioritize and coordinate the individual initiatives that comprise the Resiliency & Continuity programs. Establishing and enforcing Corporate Policies aligned with Enterprise Resiliency Goals are key criteria in all accepted standards and guidelines and regulations (i.e. BS 25999, ANSI NFPA 1600, FFIEC, HIPAA, NASD & NYSE) for best practices in Business Continuity Management.

Key Business Elements		Resiliency Investments
	|
	|
	|
	|
	|
	|
	|
	|