The new role of the business continuity manager: from cost centre to profit centre

Published: Friday, 04 September 2015 07:43

Rainer Hübert, MBCI, sets out a vision for ways in which the advantages of a business continuity management system can be quantified, helping demonstrate a return on investment and changing the business continuity function from a cost centre to a profit centre.

This is the final article in a series where we are publishing the short listed entries in the Continuity Central Business Continuity Paper of the Year competition.

In November 2013 I made a speech at the Business Continuity Institute’s BCM World Conference in London on the possibility of calculating a return on investment when implementing and running a business continuity management programme at an organization (1). In the months following this event, I realized, that this speech did not only open up a new line of reasoning to invest in a business continuity management system (BCMS) but, in reality, laid the foundation for a major change in the business continuity profession. In this short article, I’ll try to explain what may be about to happen.

Business continuity management (BCM) as a discipline was – and is – regarded by most of its advocates as a cost centre. You invest in it to prevent losses in unlikely and unfortunate circumstances, which, should they occur, could severely damage an organization and even result in its closure. The cost of BCM is normally regarded as an insurance premium: the lower, the better; and if nothing happens, the investment is written-off. While ensuring that the BCMS works as intended, the main job of the business continuity manager is to keep the cost of this function as low as possible. This is well known and normal practice across the globe; and business continuity managers are well versed in discussing the minimum investment necessary to comply with company standards with regards to contingency planning, the management of operational risks and maintaining a crisis management organization (2). Typically, business continuity is a type of grudge purchase and organizations generally only accept the need for it when they are forced to demonstrate the availability of a BCMS by either their clients or by regulatory authorities. That it simply could make sense to invest in the resiliency capability of an organization, to protect considerable investments – sometimes accumulated over centuries – against the dangers of unpredictable events, generally is not a dominant argument pro BCM (3). Part of the reason for that is that a BCMS is not seen to contribute to the profits of the company. Something that does not contribute to profit, or worse, will reduce profit, is to be avoided as much as possible. This is the situation that most business continuity managers find themselves in. However, this scenario is about to change; and business continuity managers need to change with it. (4)

We all know the investment part of a BCMS very well: consultants need to be paid; contingency resources to be bought; and people trained or specialists hired who understand the function. There are a few processes to be implemented and maintained, some of them taking bits from the workload capacity of the whole workforce, which can add up to significant amounts across the organization. Ask a business continuity manager what the function costs, and – hopefully – he or she can answer this question extensively and down to two decimal places. On the other hand, if we ask the same business continuity manager what the return on this investment will be he or she will probably say that there is no return on investment, unless some catastrophe hits the organization and the BCMS kicks in to reduce losses or save the company. In my speech at the BCI Conference mentioned earlier I showed that there is, in fact, a possible return on investment. I don’t want to reiterate the talk here, but to enable readers to understand where I’m heading, I’ll briefly list some of the possible returns:

There are further cost, quality and efficiency improving effects of having a BCMS, such as reduced cost of employee training because of documentation produced as a result of the availability of a BCMS, or avoidance of fines because of compliance with present or future regulatory demands, but I think you can get the picture. There is not only ‘investment’ involved with the use of a BCMS, there is also quite some potential for a significant ‘return’. In fact, if properly documented and activated, in many cases this return can be higher than the BCMS investment, eventually turning this function from a cost burden to a profit creator.

The business continuity manager will have to take up this opportunity. Unfortunately, all this is completely new to most of us, and we not only have to learn what to do in this regard, but more importantly how to do it. So far, identifying, discussing and claiming profits for our trade is generally not part of our training. However, we should enter this Promised Land because it offers huge benefits for achieving our goals: it means that we can acquire the functionally that we require for the task given to us, as well as offering personal advancement within the organization or trade. A manager creating profit typically is regarded somewhat better by the owners of an organization than someone who just manages cost!

The first step is to learn and to understand what the sources for profit are that a business continuity manager can influence and promote. I listed some of them above, but it is up to everyone’s creativity to identify others. Many are particular to different industries, locations or organizational sizes. A huge chemical plant with global reach will have completely different opportunities than a midsized food manufacturer providing for national markets.

The bigger challenge is to operationalize these potential profits, to measure and to calculate them. Measuring and calculating profits is only possible, however, when they are realized – and they won’t be realized just because the business continuity manager knows about them. For example, he or she needs to go to the insurance manager and explain why a reduction in business interruption insurance premium is possible because of the BCMS in their organization. This manager might even need to be trained in presenting the reasoning to insurance companies when negotiating premiums. Eventually the business continuity manager may find him- or herself sitting beside the insurance manager to assist in negotiations. The same is true with the financial manager, who negotiates the interest rates for loans taken. The sales department needs to be informed about the sales advantage of an existing and proven BCMS, or even better, of the availability of an ISO 22301 certificate, and it needs to be enabled to present this to existing and potential clients.

Last, but not least, the business continuity manager does need to invest in advocating his or her own cause: showing the results of his or her work to the relevant people in the organization. The business continuity manager needs to understand how a business case should be designed and presented so that the return on investment can be demonstrated. He or she needs to go to the controlling department and inform them of the reasons why the business continuity department has changed from being a cost to a profit centre. We need to toughen up and claim the benefits for ourselves and our team.

All this will not happen just because we want it to. We need to develop processes which allow us to track the financial advantages of our activities. We need to make sure that those advantages will actually be assigned to the BCMS and that this will be documented in the controls of the controlling department and included in the financial reports to upper management. Incidentally, most colleagues I’ve talked to about this in the past months are – speaking euphemistically – reluctant to accept this. It means more work and it’s not something they feel comfortable about, simply because most of them are out of their element here. However, this will not help. Pandora’s Box is open now, and companies will learn about this opportunity. Some of us will jump on this chance to improve the position of our function within our organization; and eventually our own position amongst our peers. Sooner or later it will become part of best practice and an expected skill of a business continuity manager to be able to demonstrate, document, calculate, promote and realize the possible profits because of the organization’s investment in a BCMS. You may not like it at present, but you had better start to familiarize yourself with this concept. In the end, it will strengthen the position of the business continuity manager in the organization and eventually will offer you many more possibilities for getting what you need to better achieve your goals in business continuity management.

The author

Rainer Hübert, MBCI, is a managing consultant and product manager at HiSolutions AG, Germany.  In the past 30 years, Rainer has worked on more than 70 projects for over 50 companies and organizations, ranging from multinational companies and organizations to local businesses and public services. At present, Rainer supports several business continuity consultancy projects in Germany, is the acting leader of the business continuity management organization of a major German mutual savings bank, is leading a working group on business continuity management at the German Risk Management Association, and is working on a book outlining a new approach to business continuity management as an alternative to the BCM lifecycle. Contact Huebert@hisolutions.com

References

Read all the shortlisted entries to the Continuity Central Business Continuity Paper of the Year competition