Risk Engineering

Business Continuity Management (BCM)

Expert-reviewed Updated: 2026-09-01 Expert-reviewed: 2026-09-04 (Guido Hesse, Hesse Group Holding AG) Version 0.1.0

Business continuity management is the systematic development of plans and capabilities that enable a company to quickly resume critical processes after an operational disruption.

Approach

The starting point is the business impact analysis (BIA): which processes are critical, and what recovery time objectives (RTO) and resources do they need? Continuity strategies build on this – alternative sites, stock buffers, second-source suppliers, redundant IT – and are operationalised in emergency and recovery plans.

Success factors

Regular tests and exercises (table-top to full-scale), a clear crisis organisation with deputies, up-to-date contact chains and anchoring in line responsibility. Untested plans regularly fail on details in a real event.

Insurance relevance

Credible BCM shortens interruption periods and thereby reduces BI exposure and premiums. Underwriters reward demonstrated continuity capability in indemnity periods, CBI limits and natural catastrophe capacity.

Standards and codes

  • ISO 22301 – Security and resilience: Business continuity management systems