Page 20 - TNR-V02N2

Implementing the Professional Practices

process, you should review plan expectations with the recommendations of an auditor. You can also successfully
auditor and determine what set of standards will be used. argue that an audit should be presented by the sponsor to
Together with the auditor, you should set audit objectives, the Board of Directors. Audits can also be high-profile in
scope, and method. The audit process should examine public sector organizations. Your department may post the
the administrative aspects of the BCM process, the plan’s results publicly, or details of any audit may be requested
structure, contents, and actions sections, and the plan’s through Access to Information legislation. Certainly, any
documentation control procedures. audit could receive media scrutiny. It is vital that you
prepare well in advance for the assessment, given its overall
An audit in the private sector can be powerful for obtaining importance. Understanding what the auditors or reviewers
senior management support for business continuity are looking for will help the audit run smoothly and, in the
upkeep and improvement. Executives are familiar with process, will help you to enrich the business continuity
the audit process and are likely to see the merit in the management program.

Sustaining Readiness: Professional Roles

• Establish an exercise/test program

• Établir un programme d’exercices
ou de tests

• Establish a plan maintenance
program
• Établir un programme de maintien
du plan

• Identify appropriate governance

• Déterminer la gouvernance
appropriée

• Establish an audit process for the
BCM

• Établir un processus de vérification
pour le BCM

• Document and communicate the
results and recommendations
• Documenter et communiquer les
résultats et les recommandations

20 Return to TOC True North RESILIENCE magazine - Fall 2023