• 98 Route 46, Suite 12,
    Budd Lake, NJ 07828. USA
  • Phone: 973-426-1444
    Fax: 973-426-1014
    TOLL FREE: 1-800-944-VIRT (8478)

Business Continuity Maturity Model

Business Continuity Maturity Model®

 

  • Overview The Business Continuity Maturity Model® (BCMM®) is a free open access tool created to assist businesses in building and maintaining a sustainable BC program. New standards for business continuity are continuously emerging, pressuring BC managers to find a business continuity program diagnostic tool that is objective, consistent and repeatable. Unlike published standards that define program criteria, the BCMM® provides you with the steps to take on the path toward resilience and compliance with standards, including those recognized by PS-Prep. 

    While there are a number of companies that can provide a proprietary evaluation, the challenge is to find a globally recognized and applied tool that is based on measurable program milestones. The BCMM® helps organizations achieve their desired resiliency level by providing answers to the following questions: 

    • Where are we now?
    • Where do we ultimately want to be?
    • Where should we be next?

    The BCMM® is a tool for businesses of all sizes to perform self-assessments and assist in improving their ability to recover from a disruption. The BCMM® provides a consistent, objective means for evaluating a company’s state of preparedness, including evaluation criteria in 8 critical corporate competencies across 6 levels. These competencies address business continuity program considerations including, but not limited to the traditional areas of business recovery, security management, incident management and technology recovery.

    Since October of 2003, BC professionals in over 50 countries have viewed the open access BCMM® and is also available in Spanish.

    Use the results of your self-assessment to identify your program’s strengths and weaknesses. Identify gaps in your current implementation strategy, evaluate your planned BC activities and generate data that will help substantiate and support recommended changes that can lead to significant improvements in your business continuity program. Justify budget requests and achieve executive “buy in” by quantifying the resilience of your business. The BCMM® is a tool that can be applied and leveraged in the evaluation and selection of critical supply chain or strategic business partners and in the determination of the quality of their contingency programs. 

    Led by Virtual, the BCMM was contributed to by a working team comprised of cross-industry practitioners through which experience, consultation, and advice could be harvested. Working team members came from a variety of industries, including telecommunications, manufacturing, energy, and banking.

    Through The ICOR and some of their training partners, Virtual Corporation conducts 2-day training seminars for business continuity professionals to become trained BCMM® assessors. Virtual Corporation has trained assessors in over 12 countries including the United States, Canada, Mexico, Australia, England, Singapore, Malaysia, Hong Kong and Korea. Participants who have successfully completed the 2-day training class will be trained in the methodology of performing both the review and audit level assessments and will be prepared to conduct assessments both as an internal corporate resource/service or as an external private consultant/service.

    The open access version of the BCMM® (English or Español), can be downloaded at no charge. Email addresses will not be used for any purpose other than providing news and updates to the BCMM®.
  • Assessment About the Business Continuity Maturity Model® (BCMM®)
    The BCMM® is an assessment tool which provides a standard approach to measure an organization’s Business Continuity Program maturity and to provide direction for creating and maintaining a BC program as a sustainable process. The BCMM® also collects meaningful benchmark data that can be used to compare how your organization matches up with similar organizations.

    The BCMM® has been updated to align to the 3 PS Prep Standards: BS 25999, ASIS SPC.1, and NFPA 1600:2010.

    There are numerous justifications for conducting a BCMM® assessment:

    • Conduct Internal Audits
    • Evaluate Business and Supply Chain Partners
    • Assist Organizational Governance
    • Align with Regulatory Requirements
    • Obtain Executive Buy-In
    • Support Program Design
    • Prepare for government or military COOP standards evaluation
    • Prepare for an external third-party audit

    A trained assessor can perform either a Review or Audit Assessment using the BCMM®.

    A Self Assessment methodology document can also be requested. If you cannot get management to commit or you don’t feel you have the time or financial resources for a full assessment, the self-assessment can be done more easily. The BCMM® self assessment method provides an informal, less rigorous outcome but still provides valuable input that could help enhance your program.  

    The Review Assessment
    A Review Assessment is completed in approximately 6 weeks. The level of analysis is equivalent to a financial review. 

    The Review Assessment process is performed with the assistance of a project host and is based on the following approach:

    • Identify appropriate knowledge experts
    • Conduct approximately 10-15 interviews based on the Virtual Corporation BCMM®Master questionnaire
    • Compile and evaluate collected data
    • Develop and issue State of Preparedness report including BCMM® scorecard, gap analysis and recommendations for enhancements to the BC program
    • Determine the need for further substantiation of collected data through a more rigorous audit assessment, if appropriate. 

    Interviews are conducted with various knowledge holders. Analysis is completed by Virtual Corporation’s Assessment Team.

    Audit Assessment
    An Audit level assessment is designed to confirm survey responses by verification of business continuity program components and documentation. 

    Auditable proofs are incorporated into an assessment questionnaire. The assessment utilizes both performance requirements and proofs in much more detail than the Review Assessment. Each assessment is customized to the business, and applied to specific areas of concern within the 8 BCMM® Corporate Competencies.

    The project length of the Audit Assessment varies and is determined prior to commencement. Level of analysis is equivalent to a financial audit.
  • Training With the introduction of various industry standards, the BCMM® provides an effective tool to help ensure compliance. Unlike other standards, the BCMM ® provides organizations with a mechanism to establish how well they have implemented business continuity as a sustainable program. In addition to providing detailed criteria for businesses to use to evaluate and improve their BC programs, the BCMM® was also created to collect meaningful benchmark data. In order to ensure statistically valid data, Virtual created an extensive BCMM® assessment survey hosted at a secure facility. Training is available that teaches how to apply a consistent methodology and how to use the BCMM® to evaluate an organizations’ BC Program or to determine compliance with one or more popular standards. Although the BCMM® is available to everyone, this survey and the aggregated data is only available to trained assessors.

    The ICOR conducts 2-day training seminars for business continuity professionals to become trained BCMM® assessors. Virtual Corporation has trained assessors from the United States, Canada, Mexico, Australia, England, Singapore, Malaysia, Hong Kong and Korea. Participants who have successfully completed the 2-day training class are trained in the methodology of performing both review and audit level assessments. The ICOR is Virtual’s exclusive training partner in the United States.

    Companies can train their internal business continuity or audit professionals. If a more independent assessment is desired, a consultant external to the business could be engaged. Assessment results can be used for investment, insurance, and other financial and risk management decisions.

    Whether performed by an internal or external resource, clients receive an objective evaluation of all aspects of their BC program, enabling them to clearly identify gaps in current implementation strategy. With this insight they can move forward to establish priorities for future BC activities including PS-Prep certification.

    All trained assessors will have access to:

    • BCMM® Service Center
    • BCMM® Scorecard Calculator
    • Web-Based Assessment Software and Questionnaire
    • Proofs Acquisition & Analysis Checklist
    becoming a bcmm trained assessor


    Course Description: Business Continuity Maturity Model CSILBCM4050
    Become a BCMM® assessor and increase your intrinsic value as an internal business continuity professional. Participants who have successfully completed the 2-day training class are trained in the methodology of performing both review and audit level assessments aligned to the 3 PS Prep standards using the Business Continuity Maturity Model®

    The purpose of the BCMM is to provide a meaningful tool to objectively and consistently measure the organization’s disaster-readiness and state of preparedness. The Model meets the following goals:

    • Provides a diagnostic tool for objective evaluation of business continuity program effectiveness
    • Generates consistent data from which meaningful benchmark analyses can be drawn
    • Answers the following key questions:
      1. Where are we now?
      2. What is the target we’re shooting for?
      3. What steps in what order do we follow to get there?

    SEE THE FULL COURSE SCHEDULE

    What you will Learn in BCMM Training?
    As a BCMM® assessor you will be able to perform the following assessments for your government Agency or DoD Component:

    The Review Assessment
    A Review Assessment analysis is equivalent to a financial review. Using the BCMM® Master Questionnaire, conduct interviews, and compile and collect data to issue a State of Preparedness report that includes a BCMM® scorecard, gap analysis and recommendations for enhancements to the BC program.

    Audit Assessment
    The Audit Assessment utilizes both performance requirements and proofs in much more detail than the Review Assessment. Each Audit Assessment is customized to the organization and applied to specific areas of concern within the eight BCMM® Corporate Competencies. An Audit Assessment is designed to confirm survey responses by verification of business continuity program components and documentation.

    Who should Attend?
    Business Continuity professionals with a minimum of three years dedicated BC experience. All participants will be expected to possess a significant level of understanding of BC principles and terminology. This is not a course for general business continuity principles. Experience as an internal or external consultant is highly desirable.

    DOWNLOAD THE BROCHURE