01 — Understand
Analyse the organisation, its environment, missions, dependencies and constraints to understand what must continue to operate under all circumstances.
02 — Identify
Identify threats, vulnerabilities, signs of fragility and critical resources that determine business continuity.
03 — Prioritise
Prioritise risks according to their likelihood, impact, timeframe and the criticality of exposed functions.
04 — Prepare
Define scenarios, responsibilities, continuity solutions, communication channels and fallback options before a crisis occurs.
05 — Test
Put arrangements to the test through exercises, simulations or stress tests to identify weaknesses before a real event occurs.
06 — Learn
Measure gaps, learn from experience and adjust arrangements based on what exercises or crises have actually revealed.
07 — Strengthen
Turn lessons learned into lasting measures, strengthen risk culture and reinforce partnerships and collective adaptive capacity.