Browsing articles in "Reputation"

Have you really thought about getting ready for Winter?

Nov 8, 2011   //   by David   //   Business Continuity, Management, Reputation  //  No Comments

It’s that time of year again…. It’s November, the clocks have been changed and leaves are rapidly leaving the trees. Almost exactly 12 months ago we had the first falls of snow. Last year’s problems were that the temperature stayed below zero from November through to almost the end of January. So the snow became ice and even more snow fell. Repeat for 6 to 8 weeks and that’s what happened last year. I’m sure you remember the problems this caused with roads being gridlocked, trains and planes being stuck and a general sense of “oh no”. Sure, it gave us a nice white Christmas, but for many businesses it was a stressful period. Retailers suffered with a dramatically reduced footfall in what is normally their busiest season. Distribution businesses suffered because, although main roads had been kept open, many smaller roads were dangerous and even un-driveable for weeks. Healthcare was under pressure with many more slips and falls injuries than normal. I remember all too well the number of mornings I spent shovelling snow from my driveway. Roads closed, airports closed, schools closed, businesses interrupted. We’ve already seen the east coast of America having a severe snowfall which resulted in massive disruption.

The question has to be, have you actually learned the lessons from last year?

What have you done to ensure that your business is ready for winter? We all know what happens in the UK when there is a significant snowfall. Everything stops. Despite the latitude of the country we seem to manage to be taken by surprise – every year. Why? Why should it be a surprise that when it snows transport becomes difficult? It can only be because we don’t really think back to the problems of previous winters and actually make preparations. Although the weather forecasters can give us a decent forecast for the next 48 hours or so, we’re not good at taking it seriously. A statistic from a Transport Scotland survey is that 70% of journeys to work are by car/van/minibus. Public transport only accounts for 15% of journeys to work. So when the roads become difficult it’s no wonder there’s an immediate impact on workforces. Have you considered asking your staff how they commute to work? (look out the window at the staff car park and do a quick estimate of the impact road disruption will have.)

Last winter, one of the most challenging days in Scotland came on a Monday morning when there was a severe and heavy snowfall across most of the central belt between 07:00am and 10:00am. This snowfall was forecast, but when the morning commuter traffic started the snow hadn’t. It fell at the worst possible time and led to pretty much all of central Scotland being gridlocked and closed by lunchtime. It took several days to get the main roads clear again and many weeks before all the side roads were cleared. Much criticism of the local authorities and Government followed. Now, to be fair the Scottish Government has taken this seriously and has made plans to ensure that wherever possible they are better prepared for winter. There is an increased quantity of grit/salt available across the country. All in all, it is an encouraging sign that the Government taking the problems which we had last winter seriously. There is a Ready Scotland website which will be used as one of the communications channels : . Twitter feeds and various other real time information services will be used.

Regardless of the preparations being made by Government and other public sector bodies there are simple steps which can be taken by any business and by each and every one of us :

For Businesses/Organisations

  1. Be sure you know what your business critical processes and services are. Can you readily say what you will *not* do if the weather prevents your staff from travelling to work? If you can do this, by implication you must know what you *will* do.
  2. Be sure that you have an up-to-date and reliable (i.e. tested) way of getting a message to all staff outside of normal working hours. Likewise for suppliers and customers. Use your website or use Twitter (with care). Use a call-in messaging service for your staff, but make sure they know the number to call before the first fall of snow.
  3. Review your policies and procedures for staff working from home (if appropriate, and remember that employers still have duties under H&S law for staff working at home). Also review your staff absence policies. What decision will you make if schools are closed and staff need to look after children? How much pressure is your staff under to travel to work if the Police and Government advice is not to travel? It’s not easy, but war-gaming this scenario now could avoid considerable stress and problems later.
  4. Consider what you would do if your staff needed to stay overnight closer to their place of work. Can you help with accommodation?

For everyone who commutes by road (and surveys say that’s 70% of us)

If you travel to work by car you really should take sensible precautions to prepare yourself.

  1. Carry suitable clothing and winter shoes/boots in the car (and gloves, possibly a hat)
  2. Carry a suitable charger for their mobile phone in the car
  3. Consider buying winter tyres (most tyre dealers now have stock of common sizes. Some will store your “summer” tyres for you)
  4. Carry a grab bag of emergency resources – e.g. foil blanket, hi-visibility vest, torch/lightstick, bottle of water, something to eat –sweets maybe.
  5. Keep car fuel level higher than you may in good weather. Sitting idling for hours in traffic jam can burn more petrol/diesel than you’d expect.


This is probably the most common sense thing we’ve ever written about but…………



Me – I’ve bought a couple of plastic snow shovels and have them ready and waiting………. And my grab bag is in the boot of my car.


As usual please feel free to post your thoughts and comments on this blog entry.





What Price – Business Continuity?

Aug 3, 2011   //   by David   //   Business Continuity, Management, Reputation  //  No Comments

As a professional services company working in the risk/resilience/recovery field we’re often asked by our clients to advise them on what they should be spending on Business Continuity. Now, leaving aside the old jokes about consultants borrowing your watch to tell you the time, this does put us in an interesting position. What price is the “right price” for business continuity? Read on for some suggestions.

How do you know that your organisation has prepared well enough to be able to recover from unforeseen events? No international standard or regulatory body can force any organisation to commit a sum of money towards resilience. Yet worries about resilience and reputational risk come up time after time in audit committee reports. While many millions are spent on I.T. technical disaster recovery, this on its own doesn’t make an organisation resilient. “Business continuity” is still something of an anathema for boardroom spend, which is why they ask our advice. The board don’t yet think they have a good yardstick to measure the value of resilience and business continuity. The obvious answer to this is to work out what you stand to lose from an incident. Think carefully about this before you answer. You may like to think about your business in ways like this:

  • How many widgets do we manufacture (or consume) in a day/week/month?
  • How much does our Business Interruption Insurance cost?
  • Where will we keep working from if we can’t get into our normal site? (hint – think about what might happen if you had to vacate your site in hurry and left all laptops and paperwork in the site)
  • How many people work at the site?
  • Who manages our communications capabilities?
  • How do we communicate with each other and head office in the middle of an incident?
  • Where is the report from the last resilience/recovery incident management test?
  • What did we spend on technical I.T. disaster recovery?
  • Have we ever fully restored our backup I.T. systems and how long did it take?
  • We’ve two I.T. rooms, but they’re both on the same site. What level of resilience are we really getting here?

So, my challenge to all readers of this blog who are involved in any kind of on-going business is this: What value do you put on being confident that you can recover from any incident? Always think about the bigger picture. Sure you probably know all your colleagues and peers phone numbers (mobile and home) but an event way beyond your control could be the trigger that stops your operations. In recent years we’ve seen outbreaks of flu, severe weather, volcanic eruptions, fuel shortages, stock market volatility. These are only the big events, smaller scale incidents of floods and technology failure have impacted on many thousands of businesses. It all comes back to the question in the topic for this post – what price business continuity? Is it a responsible management attitude to spend as little as possible in the hope that an incident never happens? Is it a responsible management attitude to consider how much turnover/profit and reputation will be lost if an incident occurs then base a business continuity budget on the cost impact of one major incident?

To us, the answer is obvious and it’s not an answer any consulting firm can influence. Before we reveal our method – I’d be interested in hearing from other people in business (and consulting) for your ideas.

What price – Business Continuity?


It’s not a game anymore…..

Apr 28, 2011   //   by David   //   Blog, Business Continuity, Reputation  //  No Comments

……as executives at Sony are now all too well aware. They were faced with two problems, 1) the removal of the online service provided to PlayStation gamers and 2) the reputational risk posed by (1).

As is now well publicised, Sony shut down the PlayStation Network (PSN) because it had been hacked. Various media sites are giving various details, but it’s clear that the data loss is massive and worldwide.

Sony’s reactions to this maybe tell us something about risk management, reputation management and differences between how we approach this in the West, compared to how it is seen in the East. Although details of the problems broke very quickly thanks to blogs, Twitter, FaceBook and the general online community it took Sony more time to provide a corporate response than perhaps a Western firm would have done. (There is a parallel here with the actions taken by Toyota when they has braking system problems on many cars.) It seems that Sony took time to consider their problems and to assess how they could best recover them before they sent out any corporate messages. So, I pose the question : are we seeing the cultural difference between an Eastern response to a problem and the way we in the West would respond to such a problem?

Sony are being pilloried in some parts of the media for their slow response. But if they were making the systems safe and assessing exactly what happened, were they actually doing anything wrong? They may have BC plans which tell them that they should conduct thorough analysis before providing a statement. By doing this they can provide a statement based on facts and events which happened rather than simply saying “We’ve got a problem” But the Western BC world doesn’t really do “delays”. I just wonder if this is a cultural thing? Sony is now facing lawsuits (surely only the lawyers will make money on this one) and their reputation has been damaged. Yet other organisations have lost user data, and few have suffered any real long term reputational harm. So maybe it’s not “game over” for Sony’s PSN quite yet.


Notwithstanding all of the above here are our personal recommendations if you’re a PSN user.

If you, or perhaps your children, were users of the PSN you should consider the following:

  • Did I use my PSN login details anywhere else? (e.g. did you use the same email address and password combination for accessing any other online services)
    • If yes, then you should change at least the password on the other services.
  • Did I have a credit card lodged with PSN
    • If the answer is yes, then you should watch that card carefully over the next few months.


Your thoughts and comments are welcomed.