trending in business continuity - bc management, inc. by bc management, inc. - june 2012 trending in...
TRANSCRIPT
Prepared by BC
Management, Inc.
- June 2012
Trending in Business Continuity An Assessment of Data Collected Between
2009 - 2011
Benchmarking. Plan Ahead. Be Ahead.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 2
Table of Contents
Welcome 3
Summary of Data Findings 3-5
Trends of Interest within the Business Continuity Profession 6-24
Corporate Integration of Business Continuity
IT/ disaster recovery & business continuity strategies adequately supporting organizations 6
Disciplines managed within the business continuity program 7-8
Integration of program with other organizational disciplines 9-10
Status of current program 11
Budgeting
Budgeting of expenses within organization 12
Approximate annual budget for contingency related program expenses 12
Budget revisions 13
Personnel
Current dedicated personnel 13
Hiring initiatives for the next year 14
Reduction of full-time, permanently employed personnel in the next year 14
Primary reason behind a reduction in force in the next year 15
Organizational Reporting Structure
Reporting structure – department owner for business continuity 16
Is the business continuity program positioned for maximum visibility by department owner 17
Program Sponsor
Assessment by job title on who is totally engaged and sponsoring the program 18
Sponsor’s level of engagement if a chief officer level or above 19
Technology Recovery Solutions
Utilization of third-party hot site/ alternate site technology providers 20
Considering an internal recovery capability 20
Vendor Utilization
Utilization of software planning tools, automated notification tools and/or mobile recovery solutions
21
Reasons for Planning, Regulatory Requirements & Organizational Certification
Primary reasons for developing and maintaining a program – “Priority” or “High Priority” 22
Regulatory requirements and/or standards to model program after – “Priority” or “High Priority”
23
Achieved certification in an organizational standard 24
Organizational standard achieved certification in 24
Participant Data & Respondent Characteristics ~ An overview of international respondent characteristics. 25-29
Reporting History, Study Methodology, Assessment of Data & Reporting 30-31
Thank you to BC Management’s International Benchmarking Advisory Board 31
Thank you to our Sponsors and those Organizations who Distributed the Study and/or Report 31
About BC Management, Inc. & Where to Download Complimentary Business Continuity Management Compensation Reports
32
Customize a Report Exclusively for your Organization 32-33
Confidential Report
This is a confidential report. As such, the information within this report should not be shared outside the
organization that requested and purchased the research data. This report is not being distributed as a
complimentary report among the profession. Please contact BC Management if you would like to share or
site any of the information included within the report.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 3
SUMMARY
How to Read the Report
The Business Continuity Trending Report is designed to provide a summary of the wealth of data collected
from nearly 3000 respondents to BC Management’s Internat ional Business Continuity Management survey as
i t pertains to trend analysis . This report wi l l serve as a resource in assessing and understanding the
d irection of the business cont inuity management profession .
Highlighted throughout this report are a var iety of business cont inuity program management init iat ives that
showed the most noteworthy changes between 2009 and 2011. This is the f irst report of i ts kind and BC
Management is able to offer such a report as a result of data analysis from three consecutive years of an
identical survey.
Findings Business Continuity Management Program Advancements
In assessing the data results between 2009 and 2011 we noticed the following business continuity management program
advancements that indicate a shift to an enterprise-wide resiliency focus with increased executive support and acknowledgement of
increased standards that will more than likely continue to evolve the profession in the future.
More respondents indicated that the business continuity program and/or the disaster recovery program is meeting the
organizational needs of the corporation.
Increase in the number of disciplines managed within the business continuity management program with crisis
management, emergency management and risk management showing the greatest increase.
Improved integration of the business continuity management program with other corporate functions with security-
information, information technology, emergency management, disaster recovery (IT focus) and crisis management showing
the greatest improvement.
Adding more full-time, permanent personnel dedicated to the program and a decrease in downsizing of personnel in the
next year.
The business continuity office showed the most significant gain of where to position the program when assessing the
department owner and organizational structure.
Risk management and the business continuity office received the highest approval ratings of where to position the program
from a department/ organizational structure review.
Increased awareness seems to be evident at the chief officer level as more respondents indicated a shift in program
sponsor from mid management/ management to the chief officer level/ board committee.
The chief level program sponsors are stepping up their level of engagement with the business continuity management
program.
More respondents noted several standards/ regulations to model their business continuity program after as a high priority.
Advancement of organizational certifications as more respondents noted to obtaining multiple organizational certifications.
Thank you for purchasing BC Management’s Business Continuity Program Management Benchmarking Report. This report
is designed to give your organization a picture of how other organizations are approaching their business continuity
planning initiatives without any customization relating to your specific organization. The data within this report will be
instrumental in assessing/elevating your business continuity management program.
This report is meant only for the individual who purchased the report. Do not distribute outside of your organization.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 4
Business Continuity Management Program Deteriorations
Our study pointed to a few disappointing data points that center on budgeting of the business continuity management program. We
can assess that this is more than likely due to the deep recession, especially since this trend analysis is between the timeframe of
2009 to 2011. Corporations around the world are understandably cost conscious, thus the following data findings were not
surprising.
A shift was indicated as to how business continuity is being budgeted within corporations from being allocated
independently to having no defined budget.
Severe cuts in business continuity management program budgets were noted between 2009 and 2011.
The most significant budget decrease was for those respondents who tied their business continuity management budget to
other corporate departments.
Other Business Continuity Management Program Notable Trends
Our data analysis indicated other noteworthy business continuity management trends. These trends could be viewed as having a
positive, negative or neutral impact to the future of the business continuity management profession.
The 2011 study showed that more respondents indicated no change to the business continuity management program
budget in the next year.
There was a significant decrease in the number of part-time dedicated personnel to the business continuity management
program while full-time dedicated personnel showed consistency.
Those corporations who are downsizing the dedicated business continuity personnel indicated increased drivers between
2009 and 2011 to be a change in priorities, reduction in scope of work and transfer of functions. The most significant
drivers in 2009 (financial pressures and organizational restructuring) did diminish substantially, although the data results
still indicated these factors as considerable.
Increase of respondents who noted a mix recovery solution between a third party hot site/ alternate site vendor and
internal recovery solution as well as an increase of respondents who noted an internal solution at an alternate site. At the
same time, those respondents who noted an exclusive use of a third party hot site/ alternate site vendor for their recovery
solution declined.
Slight increase in utilization of software and notification provider tools between 2009 and 2011.
More respondents noted the following as a high priority for reasons to develop and maintain a business continuity
management program.
o Ensure safety of employees
o Be compliant with good corporate governance
o Response to audit results/recommendations
o History of business interruptions
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 5
Using the Data How Can this Report Benefit Your Program and Your Organization?
What is the take away?
This report is a compilation of all the data provided in the 2009, 2010 and 2011 studies. Our summary is a broad analysis of a
segment of the data offering an illustration of how the business continuity profession is viewed and what we can learn from these
study results. This is simply a baseline of the trends in our industry. Our hope is that you can use it as a starting point, if not a guide
as you work towards gaining executive support and establishing metrics to better measure the effectiveness of your program. The
report can be leveraged to provide you with facts to present to your executive management to help justify continued emphasis in
key areas of your business continuity program. But don’t forget, as professionals in this industry, the report also offers insight into
career development opportunities that you should use to identify areas to further develop your own skills.
As you continue on your journey consider benchmarking your organization against your peers. Enclosed you will find a great deal of
data, though it is impossible to display everything, which is why the customized reporting by organization will be essential if an
organization wants to obtain a clear understanding of other “similar” organizations. A feature of the customized reports is providing
a detailed analysis specific to your industry which not only allows you to benchmark your own program against very mature
programs specific to your demographics, but also is an opportunity to create a roadmap for your program based on effective peer-
based models and supporting data.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 6
0%
10%
20%
30%
40%
50%
60%
2009 2010 2011
IT/DR Strategies Meet Organizational Needs
No
Yes
0%
10%
20%
30%
40%
50%
60%
70%
2009 2010 2011
BC Strategies Meet Organizational Needs
No
Yes
7% Increase from
2009 to 2011.
6% Increase from
2009 to 2011.
Corporate Integration of Business Continuity
Study Question - To your knowledge, do you feel your current IT/Disaster Recovery and Business
Continuity strategies adequately support the needs of y our organization? (An assessment of all
study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 7
BC Management’s study inquired on how many and which disciplines are managed within the business continuity
management program. The purpose of this question is to assess how business continuity is managed within
organizations, meaning which disciplines are commonly paired within a business continuity/ disaster recovery
management program and how many functions is a business continuity/ disaster recovery manager commonly
overseeing.
0%
10%
20%
30%
40%
50%
60%
70%
1 2 3 4 5+
Number of Disciplines in the Program
2009
2010
2011
18% Increase
Study Question – Please specify all the disciplines that you personally manage within your
program. Select all that apply . (An assessment of study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 8
0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%
Other
Security - Physical
Security - Information
Risk Management - Operational
Risk Management - Insurance
Risk Management - Enterprise
Records Management
Pandemic Planning
Information Technology
Health & Safety - Environmental
Health & Safety - Occupational
Facilities Management
Emergency Management
Disaster Recovery Process (IT Focus)
Crisis Management
Compliance
Business Continuity Process (Business Focus)
Audit
Discplines Managed in the Program
2011
2010
2009
7% Increase
8% Increase
8% Increase
2% Decrease
4% Decrease
Question not included
in the 2009 BCM Study.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 9
The two data graphs below highlight the percent of respondents who indicated “No Integration” and “Completely
Integrated” in 2009, 2010 and 2011 for the disciplines noted. Several categories were not included in the 2009 BCM
Study (Business Unit Participation, Change Management, Executive Protection, Media Crisis Management, Pandemic
Planning, Privacy, Senior Management Participation/ Sponsorship and Strategic Plan/ Corporate Mission Statement). In
reviewing the results from the previous three previous studies, we discovered that the following disciplines showed
improvement: Security- Information, Information Technology, Emergency Management, Disaster Recovery (IT Focus)
and Crisis Management.
0% 5% 10% 15% 20% 25% 30% 35% 40% 45%
Strategic Plan/ Corprate Mission Statement
Senior Management Participation/ Sponsorship
Security - Physical
Security - Information
Risk Management - Operational
Risk Management - Insurance
Risk Management - Enterprise
Records Management
Privacy
Pandemic Planning
Media Crisis Management
Information Technology
Health & Safety - Occupational
Health & Safety - Environmental
Facilities Management
Executive Protection
Emergency Management
Disaster Recovery (IT Focus)
Crisis Management
Compliance
Change Management
Business Unit Participation
Audit
Disciplines - No Integration with Program
2009
2010
2011
4% Improvement from 2009
10% Improvement from 2009
4% Improvement from 2009
11% Improvement from 2009
6% Improvement from 2009
Study Question - How well integrated are the following within your organizational program?
Please rate on a scale of 1 to 5 with 1 meaning NO INTEGRATION and 5 meaning COMPLETELY
INTEGRATED. (An assessment of all study respondents.) *All related enterprise discipl ines are l isted within the study to accommodate a variety of discipline expertise .
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 10
0% 20% 40% 60% 80% 100% 120%
Strategic Plan/ Corprate Mission Statement
Senior Management Participation/ Sponsorship
Security - Physical
Security - Information
Risk Management - Operational
Risk Management - Insurance
Risk Management - Enterprise
Records Management
Privacy
Pandemic Planning
Media Crisis Management
Information Technology
Health & Safety - Occupational
Health & Safety - Environmental
Facilities Management
Executive Protection
Emergency Management
Disaster Recovery (IT Focus)
Crisis Management
Compliance
Change Management
Business Unit Participation
Audit
Disciplines - Completely Integrated with Program
2009
2010
2011
15% Improvement from 2009
18% Improvement
from 2009
11% Improvement from 2009
16% Improvement
from 2009
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 11
0% 50% 100% 150% 200% 250%
A full functioning executive/leadership transition is in place.
Currently implementing an executive/leadership transition plan.
Currently developing an executive/leadership transition plan.
A full functioning pandemic preparedness policy is in place.
Currently implementing a pandemic preparedness policy.
Currently developing a pandemic preparedness policy.
Maintain an exercise schedule in order to identify new potential vulnerabilities or weaknesses in the current BCM program. Analyze findings to elevate the program.
Maintain an assessment and audit schedule of the BCM program to ensure the program is up to date and complete.
Implemented an awareness and training program to promote and educate the entire organization on the BCM program.
Implemented a full functioning, corporate wide BCM program that meets the organization’s contingency, resiliency, risk management, emergency management
and crisis management needs.
Incorporated a full enterprise risk management program with controls in place to avoid or mitigate potential risks.
Currently conducting an enterprise risk assessment for the board and/ or senior management.
Considering conducting an enterprise risk assessment for the board and/ or senior management.
A Crisis Communications program is in place.
A Crisis Management process and plan is in place.
Policies and procedures are in place to interact and coordinate with external agencies in times of a disaster.
A full functioning Emergency Operations Center is in place.
Currently implementing an Emergency Operations Center.
Currently assessing an Emergency Operations Center.
Currently developing and implementing BC and/or IT DR plans that meet the needs of the organization.
Currently conducting BIA or risk assessments.
Currently obtaining or have management support and formulating the BCM program framework to include contingency strategies, resiliency needs, recovery objectives,
operational and enterprise risk management and crisis management plans.
Some departments/divisions have business continuity plans.
There are contingency plans in place for IT DR functions only.
Off-site data recovery only.
There are no business continuity and/or IT disaster recovery plans in place.
Status of Program
2009
2010
2011
7% Improvement
from 2009
4% Improvement
from 2009
4% Improvement
from 2010
Questions not included in the
2009 BCM Study.
4% Improvement
from 2009
5% Improvement
from 2009
4% Improvement
from 2009
Study Question - Please choose all that apply to describe your organization’s current continuity program status under your direction and management. Please check all that apply. (An assessment of all study respondents.) * “% of Resp” column will exceed 100% due to multiple selections.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 12
0%
10%
20%
30%
40%
50%
60%
Program Expenses Allocated
Independently
Program Expenses Allocated to Other
Departments
No Defined Budget
Budgeting of Program Expenses
2009
2010
2011
$0
$1,000,000
$2,000,000
$3,000,000
$4,000,000
$5,000,000
$6,000,000
$7,000,000
Program Expenses Allocated
Independently
Program Expenses Allocated to Other
Departments
No Defined Budget
2009 $2,233,235 $5,527,214 $756,463
2010 $2,277,273 $6,670,751 $955,137
2011 $1,515,813 $2,528,585 $805,521
Average Expenditures by Budgeting of Program
8% Decrease from 2009
Budgeting
Describe how continuity program expenses are bu dgeted under your direction and management?
(An assessment of all study respondents.)
Study Question – What is your company’s approximate annual budget for contingency related
program expenses? (An assessment of all study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 13
0%
10%
20%
30%
40%
50%
60%
70%
Increase Decrease Unchanged Not Sure
Budget Revisions for the Next Year
2009
2010
2011
0
10
20
30
40
50
60
Full-time Staff Part-time Staff
Dedicated Personnel to Program
2009
2010
2011
Data figure above indicates that more respondents are indicating no changes in the program budget versus decreasing
the budget. This would seem to indicate that those corporations that are cutting budgets are doing so drastically since
the budgets decreased in the previous graph.
Study Question - Please specify budget revisions for the next year for each budget line item –
Increase, Decrease, Unchanged, or Not Sure. (An assessment of all study respondents.)
Personnel
Study Question - Please indicate how many full -time employees (FTE) and/ or part-time
employees (PTE) you have dedicated to your continuity program? Please confirm that the
number below is the total FTE and PTE headcount for all locations under your direction and
management. (Auto-sum function built into study.) (An assessment of all study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 14
0
0.5
1
1.5
2
2.5
3
3.5
4
4.5
Full-time Staff Part-time Staff
Hiring Dedicated Personnel to Program
2009
2010
2011
0%
10%
20%
30%
40%
50%
60%
70%
80%
Not Sure
None 1 2 3 4 5 6-10
2009 31% 63% 3% 1% 1% 0% 0% 0%
2010 20% 77% 3% 0% 0% 0% 0% 0%
2011 20% 79% 1% 0% 0% 0% 0% 0%
Reduction of Full-time Dedicated Staff
2009
2010
2011
Study Question -How many full-time employees (FTE) and/ or part-time employees (PTE)
dedicated to the continuity program you plan to hire in the next year? Please confirm that the
number below is the total number of proposed new personnel for all locations under your
direction and management. (Auto-sum function built into study.) (An assessment of all study
respondents.)
Study Question - Will you be reducing your full -time dedicated continuity program staff in the
next year under your direction and management? (An assessment of all study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 15
0%
10%
20%
30%
40%
50%
60%
70%
80%
Reason for Reduction in Dedicated Program Personnel
2009
2010
2011
Study Question - If yes, what are the reasons for reducing your dedicated contin uity program
staff in the next year? Please select all that apply. (An assessment of all study respondents.) * Total percent may exceed 100% due to multiple selections.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 16
0%
5%
10%
15%
20%
25%
30%
Reporting Structure - Department Owner
2009
2010
2011
Organizational Reporting Structure
Study Question - Which department best describes the reporting structure of your program
under your direction and management? Please select the best response from the following
departments. (An assessment of all study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 17
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
Disagree Agree Disagree Agree Disagree Agree
2009 2010 2011
Positioning of Program for Maximum Visibility
Business Continuity Office
Corporate Offices
Information Technology
Operations
Risk Management
Security- Information
Study Question – Under the current department ownership, do you agree that the continuity
program is best situated within your organization for maximum visibility? Select ion choices
include strongly disagree, disagree, neutral, agree and strongly agree. (An assessment of all
study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 18
0%
2%
4%
6%
8%
10%
12%
14%
16%
18%
20%
Program Sponsor
2009
2010
2011
Program Sponsorship
Study Question - Please specify by job title who is totally engaged and sponsoring the continuity
program functions. Please select the best response. (An assessment of all study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 19
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
Not Involved Involved Not Involved Involved Not Involved Involved
2009 2010 2011
How Engaged is Sponsor
Board/ Executive Committee
CEO - Chief Executive Officer
CIO/CTO - Chief Information Officer
CFO - Chief Financial Officer
COO - Chief Operating Officer
CRO - Chief Risk Officer
Study Question - If the program is being sponsored by a Chief Officer or above, is this person
really engaged in your opinion? Rate on a scal e of 1 to 5 with 1 meaning Very Little Involvement
and 5 meaning Very Involve. (An assessment of all study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 20
0%
5%
10%
15%
20%
25%
30%
Yes, exclusively at
vendor
Yes, mixed between multiple
vendors
Yes, mixed between
vendor and
internal recovery
No, internal solution at
primary site
No, internal solution at
alternate site
No, currently considering
recovery
solution
No recovery solution in
place
Doesn't apply to program I
manage
Contract with a Third-Party Hot Site/ Alternate Site Provider
2009
2010
2011
0%
10%
20%
30%
40%
50%
60%
70%
2009 2010 2011
Considering Internal Recovery Capability
Yes
No
Technology Recovery Solutions
Study Question - Do you contract with a third-party hot site/ alternate site technology
recovery vendor under your direction and management? (An assessment of all study
respondents.)
.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 21
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
Yes No Yes No Yes No
2009 2010 2011
Software 46% 54% 56% 44% 50% 50%
Notification Alerts 60% 40% 71% 29% 69% 31%
Mobile Recovery 24% 76% 19% 81% 21% 79%
Utilization of Vendors
Vendor Utilization
Do you utilize software planning tools , automated emergency notification tools, or mobile
recovery solutions to assist with your Business Continuity Management program initiatives under
your direction and management? (An assessment of all study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 22
0% 10% 20% 30% 40% 50% 60% 70% 80% 90%
History of business interruption(s)
Minimize future impact
Protect stakeholders
Comply with regulations or laws
In response to audit results/recommendations
Good business sense
Right thing to do
Customer requirement
Contractual agreements/service-level agreements
Insurance policy recommendation
Organization wants to be globally competitive and must comply with international standards.
Organization wants to be perceived to be compliant with good Corporate Governance.
Organization wants to ensure safety of their employees.
Organization wants to protect and increase its economic value.
Protection of reputation and brand of organization.
Reasons for Developing and Maintaining a Program - Percent of Respondents Indicating "Priority" or "High Priority"
2011
2009
Reasons for Planning, Regulatory Requirements & Organizational Certification
Study Question - Please rate the following primary reasons for developing & maintaining a
program on a scale from 1 to 5 with 1 meaning LOW PRIORITY and 5 meaning HIGH PRIORITY.
(An assessment of all study respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 23
0%
10%
20%
30%
40%
50%
60%What Regulatory Requirement and/or Standard is the Program Modeled After -Percent of Respondents Indicating "Priority" or "High Priority"
2009 2011
Study Question - What regulatory requirement and/ or standard do you model your Business
Continuity Management program after. Rate on a scale of 1 to 5 with 1 meaning LOW PRIORITY
and 5 meaning HIGH PRIORITY. Please include Not Applicable (N/A) if the regulatory
requirement and/or standard do not apply to your organization. (An assessment of all study
respondents.)
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 24
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
2009 2010 2011
Certified in a Standard
Yes
No
0%
10%
20%
30%
40%
50%
60%
Standard Achieved Certification In
2009
2010
2011
Study Question - Has your organization achieved certification in a standard? (An assessment of
all study respondents.)
Study Question - If yes, please select which standard(s) your organization has achieved
certification. Please select all that apply. (An assessment of all study respondents.) - Total percent may exceed 100% due to multiple selections.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 25
3,152 study participants from over 50 countries as of December 15, 2011. Incomplete/ partial study responses were included as
appropriate within the report. Study was divided into 2 sections.
Business Continuity Compensation – 1,783 professionals participated in the compensation section from 59 countries. Incomplete study responses were included within this report along with the completed responses.
Business Continuity Program Management – 904 professionals participated in the program management section from 37 countries. Incomplete study responses were included within this report along with the completed responses.
Complete responses were received from the following countries: Australia, Belgium, Brazil, Canada, Cayman Islands, China,
Colombia, Denmark, Egypt, France, Germany, Honduras, India, Ireland, Italy, Japan, Kuwait, Malaysia, Malta, Mexico, Netherlands,
New Zealand, Norway, Pakistan, Philippines, Portugal, Qatar, Saudi Arabia, Singapore, South Africa, Sweden, Switzerland, United
Arab Emirates, United Kingdom, United States of America and Venezuela.
International Respondent Characteristics = 3,152 Study Respondents
Company Revenues span from non-profit/ government to over $400 Billion USD.
Study respondents span over 45 industries.
Average Number of Company Locations (Corporate/ Operational) = 16-25 Company Locations span from 0-5 Locations to more than 10,000.
Average Number of Company Locations (Retail/ Customer Interfacing) = 26-50 Company Locations span from 0-5 Locations to more than 10,000.
Average Number of Employees = 5,000 – 10,000 Company Employees span from 0-5 to more than 400,000.
Majority of respondents (61%) managed 5+ disciplines within their program.
Less than $10M, 17%
$10 - $50M, 7%
$50 - $100M, 3%
$100 - $500M, 10%
$500M - $1B, 8%$1 - $10B, 26%
$10 - $20B, 6%
$20 - $50B, 4%
Over $50B, 18%
Revenue in USD
International Participant Data & Respondent Characteristics Continued
International Participant Data & Respondent Characteristics
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 26
International Participant Data & Respondent Characteristics Continued
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 27
International Participant Data & Respondent Characteristics Continued
Those respondents who noted “Do not
manage a program” were exited from
study.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 28
International Participant Data & Respondent Characteristics Continued
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 29
6%
15%
40%
28%
12%
Program Maturity - Self Rating
Very Immature
Immature
Average
Mature
Very Mature
International Participant Data & Respondent Characteristics Continued
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 30
Since 2001 BC Management, Inc. has been gathering data on business continuity management programs and compensations to
provide professionals with the information they need to elevate their programs. Each year our organization strives to improve upon
the study questions, distribution of the study, and the reporting of the data collected. Below is a timeline detailing BC
Management’s eight years of business continuity reporting expertise.
* The advisory board is composed of 21 international thought leaders coming from the United States of America, Canada, Latin America, the United
Kingdom, Singapore, Australia, China, Japan, India, Middle East, Eastern Europe and Africa. Our board is comprised of professionals in not only business
continuity, but also risk management, emergency management, high availability and environmental health and safety.
The on-line study was developed by the BC Management team in conjunction with the BC Management International Benchmarking
Advisory Board. WorldAPP Key Survey, an independent company from BC Management, maintains the study and assesses the data
collected. The study was launched in May of 2011 and the study remained open through December 2011. Participants were
notified of the study primarily through e-newsletters and notifications from BC Management and from many other industry
organizations. A listing of participating organizations is included within this report. The study has been translated in five languages
and it accommodates professionals who are permanently employed on a full-time or part-time basis, self-employed as an
independent contractor or unemployed. Respondents receive a unique path of branching questions, which is dependent upon their
experience and employment status. The study is coded with extensive logic to ensure a correct question branching path and to
eliminate unintelligible data. It is comprised of two sections spanning over 100 questions. The first section focuses on the factors
that impact compensations within the business continuity and related professions. The second section focuses on business
continuity program management initiatives, which includes budgets, dedicated personnel, organizational reporting structure,
maturity of the program, exercises, auditing, vendor utilization, program activation during an event and much more. Respondents
to the study have the option to complete one or both sections. Only those respondents who manage a program within business
continuity or a related discipline qualify to complete the program management portion of the study. All participants are given the
option of keeping their identity confidential.
Reporting History
Study Methodology
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 31
BC Management is continuously reviewing and verifying the data points received in the study. Data points in question are confirmed
by contacting the respondent that completed that study. If the respondent did not include their contact information, than their
response to the study may be removed. With our eight years of expertise in collecting and assessing such data points, BC
Management has an exceptional understanding of what is considered questionable or unintelligible data. To date BC Management
has contacted over 200 professionals to confirm their individual study response. We then have the ability to log into the
respondent’s study and update their answers on their behalf to ensure valid data points.
WorldAPP Key Survey built a customized reporting tool for BC Management, which enables us to quickly assess data and prepare
reports. We have the ability to prepare reports with no data filtering or analyze the data in applying any combination of filters from
any of the study questions. Data findings in many of the figures were rounded to whole numbers, thus the total percent may not
equal 100%.
BC Management’s International Benchmarking Advisory Board was instrumental in reviewing the study to ensure it focused on the
topics that are of the greatest interest to continuity professionals today. The goal was to develop a credible reporting tool that
would add value to the business continuity profession. A full listing of board members and bios is available on the complimentary
BCM Compensation Report and made available to those respondents who completed the BCM Annual Study.
A special thanks to our sponsoring organizations that assisted in translating our study. Without these organizations the study may
not have been available in Chinese, Japanese and Spanish.
Distributing Organizations
BC Management also greatly appreciates the efforts of those organizations that assisted in this global effort. The contribution of
each individual organization does not indicate an endorsement of the study findings or the activities of BC Management, Inc. A full
listing of distributing organizations is available on the complimentary BCM Compensation Report and made available to those
respondents who completed the BCM Annual Study.
Assessment of Data & Reporting
Thank you to BC Management’s International Benchmarking Advisory Board
Thank you to our sponsors and organizations that assisted with this global effort
Global Data Solutions LTD
Sponsored the Chinese translation
Risk Managers and Consultants Association
Sponsored the Japanese translation
MiaTomi
Sponsored the Spanish translation
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 32
BC Management, Inc., founded in 2000, is an executive staffing and research firm solely dedicated to the business continuity,
disaster recovery, risk management, emergency management, crisis management and information security professions. With
decades of industry expertise, our staff has a unique understanding of the challenges professionals face with hiring, benchmarking
and analyzing best practices within these niche fields.
BC Management’s Complimentary Research - BC Management has been collecting data on the factors that impact compensations
and business continuity programs since 2001. To download our current complimentary reports please visit
www.bcmanagement.com.
We Value Your Comments - Thank you for participating in our annual study. Your contribution adds value to our comprehensive
reporting and allows us the opportunity to assess industry trends. Please share any comments or suggestions on how we can
improve at [email protected].
As a result of our advancement in reporting technology with World APP Key Survey, BC Management is able to offer a true
benchmarking service exclusively for the business continuity management profession. Our benchmarking service includes a report
(similar to this report) customized to your specific filters used to drill down to the data points that compare to your compensations
or program planning initiatives. As a part of our benchmarking service, BC Management is also offering a business intelligence
dashboard technology in which you will receive all the data points (based on your filter specifications) for further independent
assessment. This technology will allow your organization to further assess the data within a flexible, intelligent, user friendly format.
Obtain information on our comprehensive Business Continuity research reporting.
COMPENSATION RESEARCH DATA:
Benefits of Our Customized Compensation Benchmarking Service
Saves time and money in assessing compensations for current and future personnel. Provides a fair comparison on compensation bands based on expertise, degree, certification and geography. Assists in retaining current personnel based on compensations in the same geography and job title.
Filters Available to Customize Your Compensation Report
Employment Status – may choose from full-time permanent, part-time permanent, independent contractor and unemployed.
Geography – may choose country, state/providence, or city.
Job Title/ Position – may choose from a selection of job titles.
Discipline – may choose multiple disciplines that are managed with the program (17 to choose from).
Years of Experience – may choose from an experience band of your choice.
PROGRAM MANAGEMENT RESEARCH DATA:
Benefits of Our Customized Program Management Benchmarking Service
Allows you to assess the maturity of your business continuity program focusing on industry best practices, dedicated staff, budget breakouts, reporting structure, vendor utilization, program activation and much more.
Provides assistance in presenting business case objectives to your executives to substantiate and expand your program. Prioritizes key initiatives in elevating the maturity of your programs. Assists in building a road map to advance your program and meet your goals. Makes you more efficient by eliminating the need to do research on your own.
Customize Your Compensation and/or Program Management Benchmarking Report
About BC Management, Inc.
Copyright ©2012 BC Management, Inc. BCM Trending Report Confidential Page 33
Provides an unbiased source on how your company compares to the industry; specifically other “like” organizations, which can be used to support your recommendations.
Filters Available to Customize Your Program Management Report
Industry – may choose more than one industry. Company Revenue – may choose a revenue band of your choice. Number of Employees – may choose a selection from number of company employees. Number of Locations – may choose a selection from number of company locations in either operational and/or retail
interfacing. Geographic Distribution – may choose multiple countries as well as how the company locations are dispersed (global, multi-
country, one country, regionally within one country, statewide or citywide). Disciplines within program – may choose multiple disciplines that are managed with the program (17 to choose from). Scope of program – may choose a combination of the following: global, multi-country, one country or regionally within one
country. Maturity Rating of Program – may choose on a scale of 1 to 5 with 1 being Very Immature and 5 being Very Mature (please
note this is a self rating by the study participant). Names of Organization – may choose a list of company names that have participated in our study and completed the
program management portion of the study. Please keep in mind that not all respondents indicated their company name. Many respondents kept their organizational name private. Also, not all study respondents qualified for the program management portion of the study. Only those respondents who managed a program were encouraged to participate in the second section of the study. ALL RESPONDENT CONTACT INFORMATION IS KEPT CONFIDENTIAL AND IS NEVER REVEALED!
Inquiries
For more information or to order a report please email us at [email protected] or call us at (714) 969-8006 or toll free
within the United States (888) 250-7001
Thank you
Thank you for purchasing BC Management’s Comprehensive Business Continuity Management Compensation Report. This report is
not meant for general distribution. Any distribution of this report or reference to any information enclosed within this report is
prohibited unless approved by BC Management, Inc. Direct inquiries to – [email protected]