Business Continuity Manager

Crime, terrorism, and disaster concerns spark hiring interest

By
Mon, July 07, 2008

IDG News Service — Job description: A business continuity manager (BCM) creates plans to keep a company functioning after disruptive events such as natural disasters, terrorism, crime and computer and human error. They do a detailed, companywide business impact analysis and risk assessment that includes IT systems, building facilities, personnel and supply chain, says Roberta J. Witty, a Gartner research vice president. Starting with Y2K, companies have become more aware of the need to have disaster recovery and business continuity plans, experts say.

Why you need one: You need to have a business continuity manager, says Jim Lanzalotto, vice president of strategy and marketing at Yoh. "The cost of entry for any company is to have someone like this working for them, given the geopolitical and other risks," he says. Organizations that fail to conduct comprehensive business impact analyses and draft detailed business continuity plans could be in violation of regulations, especially in industries like finance. Plus, being unprepared in the event of a major disruption is simply bad for business. Companies have also had to expose their IT systems to the outside world via the Web, which creates a bigger security risk, says David Van De Voort, principal human capital consultant at Mercer.

Desired skills: Between five and 10 years in a consulting role, either internal or external, that has given a candidate a broad view of a company's processes. For example, a candidate from IT should have been involved in supporting specific units, like finance or operations, says Patrick Gray, president of Prevoyance Group, an IT strategy consulting firm. "You must be able to look at processes from an operational perspective and figure out what's critical, what needs to be duplicated and how to lay it all out," he says. A variety of certifications apply to this job, including those from DRI International (DRII) and Business Continuity Institute (BCI).

How to find one: Trade groups, such as DRII and BCI, are good recruitment sources, Lanzalotto says.

What to look for: BCMs must be good salespeople since they often encounter resistance. "Business continuity is a tough sell when everything is going fine and there are other priorities you could be spending your money on that might generate immediate returns," Gray says. So BCMs must be good communicators, think strategically and understand the company's operations.

Elimination round: Gray suggests asking, How do you achieve a balance between building a good business continuity plan and something that's unwieldy and overkill? The answer should reveal insight into the process a candidate would use to establish what's critical.

Salary range: $75,000 to $125,000

Growing your own: This is a job that really lends itself to growing one's own candidates because there is such a variety of certifications and training available that can be coupled with a deliberate career path, Lanzalotto says. "You can really build this person internally," he says. People with strong project management skills are good candidates, as well as those who have shown they can work across teams.

Without policies, awareness and supported alternatives for sharing files securely, end-users will often overlook security and compliance in favor of getting the job done. Read this whitepaper to determine if your enterprise has a "Dropbox Problem" and ways successful organizations address this problem.
Content provided by Google

Find out about how Google creates a security-based platform for Google Apps, covering topics like information security, physical security, and operational security.
This document is aimed at those looking at data center builds, upgrades, or consolidation. It provides an introduction to some of the new security challenges of such environments and provides recommendations for implementing security in next-generation data centers.
This editorial brief addresses the disconnect between security and operations teams and the need for IT operations teams to address security and risk management.
The McAfee virtual patching solution provides a layered approach to security risk management, while adding the ability to apply a virtual patching strategy to your existing change-management process.
Learn more about Gartner's evaluation of network IPS that places McAfee in the leaders' quadrant. Deep inspection network-based intrusion prevention continues to be a due-diligence security control.
Learn how Gartner's criteria for next generation IPS helps organizations achieve effective threat prevention despite changes in network communications, new applications, and changes in the threat landscape.
3 minute Flash video - overview of the need for and value of Configuration Control.
Cloud deployments are playing a critical role in propelling innovation for many companies. At the same time security has become the #1 one of the top concerns for IT and business leaders as they migrate into the cloud. In this webinar, learn from Accenture discusses how to recast the cloud as a "fresh chance to rethink your approach to security."
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.
Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business
VMware recently announced VMware vFabric™ Data Director, a new database deployment and operations platform that enables enterprise IT organizations to offer database as a private cloud service. Built on top of VMware vSphere 5, vFabric Data Director enables IT organizations to ontrol database sprawl through automation and consistent policy enforcement and accelerate application development cycles with self-service database management. Attend this webcast to learn how vFabric Data Director can help you build database-as-a-service in your datacenter.
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy
Resource Center