How do you “sell” your business continuity program to senior management? How do you get this so-called “executive buy-in” ? Is it a one-time deal, or do you need to continue to remind the “customers” that your program is critical to your organization?
There are many things one can do with resiliency programs once that magical executive buy-in is obtained. For one, you can get the tools required to do your job, such as: Mass Communications System (MCS), or a Business Continuity Management tool (BCM), or a location-based threat intelligence tool. You can also expand your staff to touch the other areas of the business continuity program you otherwise would not have the capacity to. On the other hand, there are a few things that might help you get the senior management’s support.
Let’s take a look at a few questions that could arise if you are subject to the regulatory examinations:
- How frequently are you being regulated?
- What components of your program are regulated?
- What’s the scope of the examinations?
- What framework do you follow?
After all, it is your company’s management that will make a decision. On the other hand, if your company wants to continue to conduct business in the specified area, it might look closer to see if it meets all of your regulations. As we all know, a license to practice business in your particular area might be suspended if you don’t follow through with your requirements.