Image links to the Table of Contents for this report.
BC Management's BCM Critical Supplier Assessment has been Distributed to those Professionals who Participated in our 1st Annual BCM Critical Supplier Assessment Study.
Missing your report? Please inquire with a BC Management representative if you did participate in the BCM Critical Supplier Assessment Study, but didn't receive a report. This report is also available for purchase at $400 USD.
Highlights from the BCM Critical Supplier Assessment:
- 48% of the respondents have a mixed Third-Party Hot Site/ Alternate Site along with an internal recovery solution.
- 53% of the respondents utilize software planning tools for their BC/DR program and as a profession the biggest struggle with these tools is multiple language capabilities, reporting and return on investment.
- 70% of the respondents utilize notification tools and these professionals noted international reach (and cost), language capabilities and local support as the biggest struggle with the present notification tools available.
- 20% of the respondents utilize mobile recovery services and it seems the biggest challenges with the current providers is in the testing capabilities and technical support.
- As a profession we are making strides in the following:
- Including service level agreements within the contracts (38% for all suppliers, 53% for some suppliers).
- Defining recovery time objectives for critical suppliers (25% for all suppliers, 47% for some suppliers).
- Contracts requiring a document business continuity plan (27% for all suppliers, 45% for some suppliers).
- There is room for improvement in the following areas with critical suppliers, though:
- Internal and/or external audit of critical suppliers' resiliency/ business continuity programs (54% are not sure or never conduct an internal audit for critical suppliers and 71% indicated the same for an external audit).
- Awareness of how often your critical suppliers conduct a BIA (69% indicated not sure or never) and/or risk assessment (61% indicated not sure or never) as well as how often documents are updated (63% indicated not sure or never).
- Awareness of where critical suppliers store backups (76% indicated not sure) and if primary and alternate sites are on separate utility grids or multiple distribution points (56% indicated not sure or no).
- Awareness of if critical suppliers follow a chain of custody controls to prevent loss of physical media while in transit to backup facility (67% indicated not sure or no) and do critical suppliers encrypt data prior to transmitting to backup facility (59% indicated not sure or no).
- Awareness of do critical suppliers inspect mail prior to delivery to primary facility (82% indicated not sure or no).