25 March 2010
Who are your stakeholders, how do they affect your business and why should you consider them as part of your business continuity arrangements?
Who are stakeholders?
A stakeholder is a person or body of people who have a vested interest in an organisation’s business, be it its success or failure.
When asked to list some typical stakeholders that your business might have, you are likely to identify ones such as staff, customers, suppliers, regulators and governing bodies, investors and shareholders.
You might go further and suggest insurers, members of the community and business partners and trade associations. They are all people who are concerned with or who may be impacted by your business on a day to day basis.
Competitors, protest groups, the media are all influential stakeholder. And they might look forward to your business’s downfall or seek ways to disrupt your business?
It’s important to remember that a number of your potential stakeholders could play a strong part in influencing the success of your business. They should remain in your thoughts at all times.
Are the expectations of your stakeholders constant?
What one stakeholder may expect from your business under normal circumstances may differ from those required during a disruption.
For example, a financial regulator may only require periodic information and feedback from you when the business is operating within its normal parameters.
If your business is unable to operate on a “normal” basis, greater communication, information and assurance may be required by the regulator to maintain its level of confidence in the company.
Other examples where a stakeholders’ expectation may differ during a disruption would be media attention (particularly if the disruption was of widespread media interest).
So, it’s important to have a clear understanding of what your stakeholders expect from you when it’s business as usual and during a disruption.
Stakeholders as part of the business continuity equation
Whether you like it or not, stakeholders play an important part in your business and it’s in your interest to fully understand who they are and what they expect from you. You should do the following:
What does the standard BS 25999 part 2 require?
The standard expects you to have considered all of the above, but it doesn’t ask for a formal analysis to determine who your stakeholders are. It rather assumes that you have done this in order to reach your conclusions.
So, how should you go about doing this? Preferably a working group of managers will identify all of the company’s stakeholders in the form of a documented list. And against each stakeholder:
This list should be formally approved by a member of senior management and be subject to periodic review. Then as part of your business continuity management arrangements, you can identify a suitable communications policy for your stakeholders.
Finally, be aware that as a result of an incident, new stakeholders may appear to your business that previously had no interest in you.
Article by
Hilary Estall, Director
Perpetual Solutions Limited
www.pslinfo.co.uk