On: 20 Jun 2017

Extract from Sunday Business Post as Chris Casey, Services Director discusses risk management & disaster recovery action plans with Quinton O'Reilly.

When you’re putting together a plan, knowing what your business is about and what’s important to it is vital. If you don’t, you’re just going to be throwing solutions at the wall without really knowing why.

For Chris Casey, services director at PFH Technology Group, businesses can be aware of the risk, but can trip up when they have to put a plan into action, as knowing isn’t the same as doing.

“Everyone knows the risk and they’re well aware that if something doesn’t work, they know what it is,” he said.

“Most businesses are pretty good at knowing what the risks are, but what they’re very poor at is planning how to get out of that risk, they know it in their heads, they probably know it on a piece of paper to a degree, but they don’t have the follow-up steps.

“What they haven’t done is a practice run and that’s the problem. You talk to people and they’ll be quick to tell you how to get out of trouble . . . but what they don’t know is they’ve never done it so they don’t know how it’s going to work, they don’t know how things are going to be integrated into their plan — and that’s the difficulty, it’s not a lack of understanding, it’s a lack of doing.”

The main thing you want to avoid is being reactive instead of proactive. Casey mentions how he’s seen examples of business trying to recover after something went wrong without having the necessary measures in place beforehand.

“[Let’s say] you haven’t gone to the cloud or you’re very cagey about it and something happens to your systems. If at that point of time you’re only assessing the capabilities of going to the cloud, it’s probably too late,” he said.

“Whatever the blockages would be to your transition, you have to do it and you’re probably doing it in a risky way because you probably haven’t assessed your full business needs.

“You will find when you move to a business continuity plan, trying to get back to where you were before is quite difficult as well. It’s all about the doing of it as opposed to the thinking of it. If you haven’t done it, you’re in a place where you’re further generating risk for the business by reacting instead of enacting.”