Top five business continuity risks for 2014

At the beginning of 2013, ContinuitySA warned that business risks were becoming more complex and intertwined, and so much harder to predict and plan for. But this year they are also becoming more extreme.

“As the world becomes more interconnected, issues faced in other parts of the globe can create risks here in South Africa. For example, the unprecedented cold weather in the United States and severe storms in the United Kingdom should be prompting businesses to start thinking about the extreme nature of the risks they face,” says Michael Davies, CEO of ContinuitySA.

“The global business environment has created a web of interdependencies so that any untoward event has a set of knock-on effects. Directors and executive management, who have a duty to ensure the company is able to stay in business, must have a comprehensive business continuity plan in place. ”

Davies and his team have identified five current categories of risk for 2014 that should be featuring in business continuity planning:

* IT and data risk is growing. IT is strategic and, to a greater or lesser degree, every business is a digital business. However, a key risk is that internal IT departments are failing to keep pace with changing needs, in turn prompting massive use of private mobile devices to access corporate systems and the unplanned use of cloud-based services like Dropbox.

Another related IT risk is “server sprawl”, creating complex environments that are difficult and expensive to manage, and hard to recover in the event of a disaster.

“The information on a company’s systems is increasingly valuable as advances in analytics make it more useful – its loss now represents a considerable risk,” Davies observes. “A lot of this data is client-sensitive and so is protected by law.”

In parallel, cybercrime appears to be on upward trend, with cybercriminals threatening precious (and often legally protected) data. Denial-of-service attacks can also cause systems to collapse, creating another business continuity risk. While estimates of cybercrime prevalence vary dramatically, it’s clear that it is both significant and underreported.

* The macroeconomic climate remains problematic. Slow and inconsistent global recovery and a volatile currency are obvious risks that most businesses consider but often from a purely financial perspective.

“But the impacts on your business’s viability may be much more subtle; for example, decreased economic activity could reduce tax receipts and so construction of infrastructure on which your business depends,” Davies points out.

* Long supply chains expose companies to a wider range of risk. Locally, Gauteng e-tolling has emerged as a proxy for political dissatisfaction (and a rare unifying issue) for both the middle and working classes. It’s possible that continued protests could disrupt supply chains, and will certainly raise costs in the short term.

“Looking more broadly, I think the combination of ever longer supply chains and the just-in-time mentality is creating a huge risk that many businesses do not properly factor into their business continuity planning,” Davies says.

“The strike by component manufacturers in our local automotive industry is one good example, but think of the effect of extreme weather on manufacturers in Japan and Thailand in past years, which all but crippled international car and electronics supply chains. A comprehensive business continuity management plan for the entire supply chain is now mandatory.”

* Environmental degradation and climate change are too easy to ignore. Aside from the obvious macro risks of violent climactic events and a compromised environment, South African business needs to pay particular attention to water.

Our water resources are limited and yet are becoming ever more polluted. Acid mine drainage is, if the scientists are to be believed, a ticking time bomb although, as is so often the case, experts seem prone to getting the timing of natural processes wrong.

* Societal risks are escalating in scale and seriousness. As 2014 is an election year, political risk has to feature on business continuity plans. Electioneering raises the stakes and could make industrial action even more bitter, while marches that get out of hand could disrupt operations.

South Africa is not the only country with forthcoming elections, and organisations should consider in which countries their products and services are being delivered and from where their supplies come. Generally, too, international political developments could derail the slow economic recovery; Iran and North Korea are only two of many countries that could spark a new crisis.

Following on from the attack on Westgate Mall in Nairobi, extremist violence must be a consideration particularly for companies with pan-African operations.

Another key societal risk to business continuity is the “new normal” of violent and protracted strike action. This unwelcome state of affairs is part of a widespread dynamic of social discontent and instability. Violent and disruptive service-delivery protests are one example, but so are growing rates of alcohol and drug abuse, not to forget anxiety and depression. All of these factors have an impact on absenteeism and productivity.

All of these five categories of risk carry the subsidiary, but highly dangerous, risk of reputational damage. Warren Buffet has rightly said, “It takes 20 years to build a reputation and only five minutes to destroy it”—and an unmitigated disaster is one way to achieve that destruction.

In conclusion, Davies warns that business continuity – the process for identifying and mitigating these and other risks, remains widely misunderstood. Too many businesses continue to imagine that if they have a plan in place for IT disaster recovery, their business continuity is assured.

“Strategic as it is, IT isn’t the whole business. Business continuity planning and management must cover all the risks the business faces and put in place contingency plans to keep the entire enterprise operating,” says Davies.

“The call centre and work-area recovery requirements for a business need to be considered, and the company must understand the risks its supply chain faces. One’s business is now dependent on entities outside of the corporation: is each of them adequately protected?”

Comment on This Article

Your email address will not be published. Required fields are marked *

Our People

Allen Smith, Executive Chairman

Allen Smith, Executive Chairman

Michael Davies, Chief Executive Officer

Maxine Arnold, Chief Financial Officer

Maxine Arnold, Chief Financial Officer

Bradley Janse van Rensburg

Bradley Janse van Rensburg, Solution Design Manager

Mark Beverley, General Manager: Service Delivery

Wayne Reed, General Manager: R&D

Cindy Bodenstein, Marketing Manager

Miles Murray, General Manager: Sales

Miles Murray, General Manager: Sales

Tracey Linnell, Business Continuity Management

Tracey Linnell, General Manager: Advisory Services

About Us

ContinuitySA is the African continent’s leading business continuity management company.

Our team of highly skilled and qualified industry experts  can help prepare for and deal with potential threats to the optimal functioning of any business, as a result of unforeseen or sudden disruptions due to human error or natural events.

ContinuitySA provides clients with total business continuity solutions and complete outsourcing services, through a comprehensive range of professional services backed by an unrivalled nation-wide infrastructure of facilities, including product offerings and resources.

Our services are focused on the provision of complete business continuity planning, among which include:

•             Risk management,

•             Business impact analysis,

•             Business continuity plans,

•             Crisis management planning,

•             Provision of IT and business recovery facilities including office, contact centre, treasury dealing rooms and back-office Wintel, midrange and mainframe recovery areas. All of these technologies are supported by skilled technical personnel who assist in successful Business Continuity Plan testing and have experience in recovering from actual disasters.

We operate the largest recovery facilities in Southern Africa, with over 25000 sq/m of facilities in Gauteng (Midrand and Randburg), a smaller site in Cape Town of 3000sq/m as well as a 1500sq/m site in Gaborone, Botswana.

Contact Us


Unit5, Growthpoint Business Park

Corner Old Pretoria and Tonetti Road



PO Box 2638



Tel: + 27 11 554 8000

Fax: + 27 11 554 8150


Sales and Marketing:             

Office: (011) 554 8000

Fax: (011) 554 8050



Western Cape

15 Maritz Street


Cape Town


PO Box 897



Tel: +27 21 917 5400

Fax: + 27 21 945 2762


ContinuitySA Botswana

Street  No 268

Private Bag 00346

Phakalane , Gaborone


Tel: +267 360 6600

Fax: +267 318 1930


ContinuitySA Mozambique

Rua De Souza 18



Tel: +258 2172 6000


ContinuitySA Randburg

308 Kent Avenue

Randburg, Gauteng

Tel: 011 438 6889


ContinuitySA Somerset

Office: (011) 438 6889

Continuity Grove Offices

Block C, Olive Grove

Kynoch Road

Somerset West 7130 or

Tel: 021 917 5400