All,

Do any of you have experience of combining the two into one function or have experience of managing both? I'm looking for thoughts and feedback of how this practically works.

Edited by user 29 August 2017 08:27:14(UTC)  | Reason: Not specified

You have to be clear that these two things are separate functions but that they will follow on from each other. Incident response is about dealing with the immediate response to an uncontrolled event. It deals with thing like making sure everybody is safe and making sure it does not get any worse.  You also have to keep an eye what the statutory regulators might what to do in the aftermath of the incident.

Business continuity is supposed to answer the question “What can we do to get the business up and running again after an incident?”

They key thing is to be realistic both in the sorts of incident that might occur and what you can do about them if they do occur. Any plans that you create for this must again be realistic, not wish fulfilment.

Originally Posted by: Hsquared14

It is possible to combine the two by taking a total risk management and total loss control approach - I've got a really good book on it at home, I'll PM you the reference

I’d be nervous about combining the two things. Emergency response of for most businesses is ultimately, quite simple-get everybody away and keep them away until it is safe for them to come back. Business continuity for most businesses is quite complicated, as you have to invest in contingencies that you shouldn’t really need.  If you link the two together you might end up delaying and vacillating on the easy bit (emergency response) while you try to bottom out the overall business continuity issues.