How we support you
Depending on your starting point, we support organisations in four clearly defined roles: from initial design to independent assurance and future-oriented development.
We help organisations build continuity arrangements that are credible, proportionate and workable under real disruption conditions. This includes governance, impact analysis, continuity strategies, response structures, exercising and evidence frameworks that strengthen resilience, support assurance and improve preparedness across critical products, services and operations.
01 Design
Establishing clear structures and accountability
Business continuity framework and policy design, including Business Continuity Management Systems (BCMS) aligned with ISO 22301
Definition of roles, responsibilities and decision rights
Structuring of governance for disruption management, recovery and crisis escalation
Identification of critical activities, dependencies and resilience priorities
Design of documentation, evidence and reporting structures
02 Operate
Making business continuity work in daily practice
Business impact analysis and continuity risk assessments
Development of continuity and recovery strategies
Operational processes for incident response, escalation and recovery coordination
Design and review of business continuity plans and related playbooks
Enablement of key roles across management, operations and support functions
03 Assure
Providing confidence and audit readiness
Independent reviews of BCMS design and implementation
Implementation and effectiveness checks for continuity arrangements
Outsourced internal audit based on ISO 22301
Certification readiness assessments
Review of testing, exercising and evidence structures
Preparation for internal and external audits
04 Evolve
Keeping business continuity effective as risks, dependencies and requirements change
Monitoring of regulatory, operational and organisational developments
Maturity assessments and improvement roadmaps for BCMS
Executive sparring on resilience priorities and continuity decisions
Integration of new business, technology or supplier dependencies into existing arrangements
Support for continual improvement and stronger cross-functional coordination
Typical situations and challenges
Organisations typically contact us when one or more of the following situations arise.
Continuity responsibilities exist, but roles and ownership are unclear
Critical activities depend on key people, suppliers or systems without sufficient resilience planning
Management asks whether current continuity arrangements are adequate and defensible
Preparation for ISO 22301 implementation or certification
Weaknesses in plans, exercises, recovery arrangements or documented evidence
Pressure from customers, group requirements, auditors or regulators
Typical starting points for engagement
Engagements often start with a focused assessment or review, such as the following.
Business impact analysis review
Continuity risk assessment
ISO 22301 readiness assessment
Review of business continuity plans and recovery arrangements
Internal audit of BCMS processes
BCMS maturity assessment and improvement roadmap
Why Halderstone
Our approach
We focus on management systems that work in practice, not paper frameworks
Strong experience with management systems, governance and audits
Clear separation between design, operation and assurance
Independent, technology-agnostic and method-driven perspective
Suitable for both organisations building a BCMS and those strengthening an existing one
What we deliberately do not do
Take over operational responsibilities for crisis or recovery management
Offer generic, template-driven compliance solutions
