Home / Services / Technology & IT Governance / Business Continuity Planning
Technology & IT Governance
Business continuity planning that keeps payments running
We identify your critical services, plan how to keep them running through disruption and test the plans with your team, so customers and partners are protected when things go wrong.
At a glance
Business impact analysis
Impact tolerances
Continuity strategies
Continuity plans
Supporting fintechs in the UK, EU, US and Canada
Overview
Disruption is a when, not an if
Partner outages, cloud failures, cyber incidents, staff absence and office loss can all stop a payment business. Regulators expect firms to identify important business services, set impact tolerances and show they can stay within them.
Hilix runs a business impact analysis, maps dependencies on people, systems and vendors, defines recovery strategies and writes clear continuity plans. We then run tabletop exercises so your team knows exactly what to do.
What’s included
Everything included in Business Continuity Planning
Who this is for
- Regulated payment and e-money firms
- Fintechs dependent on key partners
- Businesses answering resilience questionnaires
- Firms after an outage or incident
What you receive
- Business impact analysis
- Business continuity plan
- Crisis communication templates
- Exercise reports
- Annual review schedule
How we work
How we strengthen your technology governance
Review
We assess current systems, vendors, access, change and incident practices.
Document
Policies, procedures, registers and plans written for your environment.
Embed
Processes put into daily use with your engineering and operations teams.
Test and report
Controls tested, exercises run and results reported to leadership.
FAQ
Business Continuity Planning: common questions
What is the difference between BCP and DR?
Business continuity covers how the whole business keeps operating. Disaster recovery focuses on restoring technology and data.
How often should we test?
At least annually, and after major changes. We recommend practical tabletop exercises.
Does this cover remote teams?
Yes. Plans cover distributed teams, outsourced providers and remote working risks.
Keep exploring
Related services
Disaster Recovery Planning
Recovery objectives, backup strategy, recovery runbooks and DR testing for systems and data.
Vendor & Outsourcing Risk Management
Due diligence, criticality assessment, monitoring and exit planning for vendors and outsourced providers.
IT Governance & Controls
Access, change, incident and asset controls with policies, registers and evidence that satisfy auditors.
All Technology & IT Governance services
IT governance, API integrations, vendor risk, business continuity, disaster recovery and security policies.