Category Risk Management

Business continuity management is good governance

11 July 2013 David Bollaert, ContinuitySA

Good corporate governance is now mandated by law through the Companies Act. Compliance with the King Code of Governance (King III) has also become a requirement for listing on the Johannesburg Stock Exchange. Corporate leaders now recognise it as a prereq

“Corporate governance aims to put in place the mechanisms necessary to ensure a company is sustainable, in every sense. Business continuity management has an important role to play in achieving this goal because it identifies threats and provides a framework for responding to them,” says David Bollaert, senior advisor, Business Continuity Management at ContinuitySA.

The bitter truth is that controls don’t always work to protect organisations against all threats. When a catastrophe occurs, business continuity management provides the safety net that aids recovery. Bollaert cites research by Rory Knight and Deborah Pretty showing that companies with a recovery plan were able to respond better to a crisis and were ultimately able to increase their value relative to unprepared companies by 22 percent by the 225th trading day. Other research indicates that 25 percent of those companies that are hit by a disaster simply never recover at all.

It’s also worth noting that the sustainability trends and risks faced by companies over the coming decades are growing in complexity and impact. Among them we should list climate change and associated extreme weather; scarcity of energy, water and materials; increased populations; wealth disparity; increased consumer demands; food security and massive urbanisation. Other risks include increased global outsourcing, supply chain complexity, reliance on third parties and ICT to operate, and a client base that is more aware and demanding of demonstrated resilience capabilities.

Perhaps unsurprisingly, the average Global 1 000 company gives itself a 40 percent chance of suffering a catastrophe that would destroy more than 30 percent of its market value over any five-year period.

“And yet, most firms are not adequately prepared for disaster. However, those that are prepared are far more likely to survive—and may even be able to take advantage of

JP Morgan Chase & Co, “Disaster preparedness planning: Maintaining business continuity during crisis, disruption and recovery”, Perspective (2009), available  here , p 2. Intercep, “The business case for preparedness”, available at, p 3.

opportunities that might arise during a crisis,” comments Bollaert. “For that reason, the question of business resilience has entered law, through the Companies Act, codes like King III, and regulations like PASA. However, many of these place too great an emphasis on IT and not enough on the bigger business continuity picture.”

Given the key role that business continuity management can play in creating resilient companies, its own governance is vital. Released in May 2012, ISO22301 is the global standard for business continuity management, and provides a clear framework for the policy and programme management, ongoing monitoring and reporting, and also the routine governance tasks that are needed.

Bollaert adds that business continuity management can also help companies realise the benefits of sustainability. As companies reshape the way they do business in order to take into account the need to be sustainable, new opportunities for revenue growth from environmentally-friendly products and new markets open up. At the same time, the pressure to drive resource and operational efficiencies can help to reduce costs, and improved transparency in identifying and mitigating risk will enhance a company’s ability to survive and prosper.

“Sustainability and business continuity management are closely interrelated,” he says. “If they are seen as potential profit centres, and levers of competitive advantage, then they are likely to obtain greater support from the board—and to be able to present a better account of its strength to investors and other stakeholders in its integrated report.”

Quick Polls


What do you consider the most significant challenge in implementing the Two-Pot Retirement System?


Coping with new, unfinalised legislation, leading to uncertainty in implementation
Adapting to brand new claim types, requiring the development of digital, member-initiated claims capabilities
Addressing member education and awareness to correct misconceptions and ensure understanding of the system, including tax implications
All of the above
fanews magazine
FAnews June 2024 Get the latest issue of FAnews

This month's headlines

Understanding prescription in claims for professional negligence
Climate change… the single biggest risk facing insurers
Insuring the unpredictable: 2024 global election risks
Financial advice crucial as clients’ Life policy premiums rise sharply
Guiding clients through the Two-Pot Retirement System
There is diversification, and true diversification – choose wisely
Decoding the shift in investment patterns
Subscribe now