Business continuity advisory,
from impact analysis to tested resilience.

BCM Programme & Governance

We design BCM programmes that survive their first real disruption: policy and governance structures, roles and accountabilities, and a management-system lifecycle aligned with applicable SAMA BCM and ISO 22301 requirements — sized to your organisation rather than copied from a template.

• BCM policy, governance structure and steering committee charter
• BCM maturity review against applicable SAMA BCM and ISO 22301 requirements
• Programme roadmap with roles, accountabilities and lifecycle calendar
• Board and management BCM reporting

Business Impact Analysis

The BIA is where continuity programmes succeed or fail. We run structured business impact analyses across your critical business services — mapping processes, dependencies, single points of failure and impact over time — and translate them into recovery objectives (RTO, RPO, MTPD) your business owners actually agree to.

• BIA methodology and impact criteria approved by management
• Critical service, process and dependency mapping
• Recovery objectives (RTO, RPO, MTPD) with business sign-off
• Prioritised recovery requirements feeding continuity and DR strategy

Continuity Strategy & Planning

We develop continuity strategies and plans built for the worst day, not the audit: recovery strategy options costed against BIA requirements, business continuity plans and procedures written for the people who will execute them, and alternate-site, people and supplier arrangements that hold up when tested.

• Recovery strategy options costed against BIA requirements
• Business continuity plans and recovery procedures by service
• Work-area, people and third-party continuity arrangements
• Plan governance — ownership, review cycles and change triggers

IT Disaster Recovery Advisory

We advise on IT disaster recovery from strategy to exercised plans: DR architecture options aligned with the RTOs and RPOs your business agreed, DR plans and runbooks for critical systems, and alignment between technology recovery and business continuity so the two never diverge. Vendor-independent throughout.

• DR strategy review aligned with agreed recovery objectives
• DR plans and runbooks for critical systems
• Cloud and data-centre recovery option analysis
• Alignment of DR with business continuity and cyber resilience plans

Crisis Management

When disruption exceeds a plan, organisations fall back on their crisis structures. We build crisis management frameworks — teams, escalation and decision rights, scenario playbooks, and internal and external communications in Arabic and English — and train the people who will sit in the room.

• Crisis management framework, team structure and decision rights
• Scenario playbooks for priority disruption scenarios
• Crisis communications plans and templates, Arabic and English
• Crisis team training and simulation support

Exercising, Testing & Maintenance

A plan that has never been exercised is an assumption. We design and facilitate exercise programmes — from desktop walkthroughs to full simulations and DR tests — capture lessons into plan improvements, and set up the maintenance cycle that keeps BIAs, plans and call trees current between exercises.

• Annual exercise programme across tabletop, simulation and DR testing
• Facilitated exercises with observation reports and lessons learned
• Corrective actions tracked into plan updates
• Ongoing maintenance cycle for BIAs, plans and call trees