A tailored ICT disruption exercise tested a property investor’s business continuity and disaster recovery plans during a move to a new managed service provider, turning assumed readiness into tested capability.
THE CHALLENGE
An Australian property investor and developer holds a portfolio of commercial, retail and residential assets. It maintained a mature business continuity management framework, including established business continuity plans (BCP) and disaster recovery plans (DRP). However, it was moving to a new managed service provider for its technology, which fundamentally changed how systems would be recovered after a disruption. The plans had not been rigorously tested in the new environment, and the transition introduced new variables and potential points of failure. Without a practical, scenario-based test, there was a risk that the plans would not perform as intended in a real disruption. The organisation wanted to move from assumed readiness to tested capability by validating its plans against a realistic threat, and to give senior management confidence in its preparedness.
OUR APPROACH
Agilient designed and facilitated a business continuity and disaster recovery testing program, building on a crisis management exercise it had previously delivered for the organisation. The engagement followed a structured five-phase method aligned with ISO 22301. Consultants first reviewed the existing BCP, DRP and business impact analysis to understand the current state and key dependencies. They then developed a realistic ICT disruption scenario tailored to the organisation’s environment and its new technology arrangements. The centrepiece was a two-hour tabletop exercise for the crisis management team, designed to simulate a significant disruption in a safe, controlled setting and to test decision-making, role familiarity and the effectiveness of the plans. Following the exercise, Agilient analysed the outcomes and documented the gaps identified, together with prioritised recommendations, in a lessons learnt report.
THE OUTCOME
Senior management gained assurance that the organisation’s plans had been tested against a realistic disruption during the transition.
- Business continuity and disaster recovery plans tested against a scenario tailored to the new technology environment
- A lessons learnt report identifying gaps and setting out prioritised recommendations for continual improvement
- Improved team preparedness and clearer roles and responsibilities within the crisis management team
Related services: business continuity consulting, crisis management consultants. Sector experience: building security consultant. To discuss a similar project, contact Agilient.