Organizations need to make BCM programs measurable to enable useful oversight and accountability. Too often, however, measuring BCM becomes unnecessarily complex, time-consuming and onerous, diverting resources and sapping engagement and commitment.

Increasingly, you only can buy cyber insurance when you prove that you have implemented comprehensive strategies to reduce your risk and mitigate the cost of cyber-attacks. In fact, it is more valuable to implement those cyber security strategies than to have the insurance policy.

The most serious risk to your organization isn’t malware, supply chain disruption, pandemic or any other event. Ironically, your biggest risk is your inability to adequately recover from multiple simultaneous disruptions. In the past few years, business and society have adapted to various ‘new normals’, and one of those is disruptions layered one on another and another.