Resources
Case Studies
Business Continuity Management Framework for National UK Charity

Business Continuity Management Framework for National UK Charity

The client

National UK Charity

The work

This organisation has around 160 projects across the UK providing critical services to those individuals, families and communities that are affected by drugs, alcohol, crime, homelessness, domestic abuse, and antisocial behaviour. Our client realised the need to enhance their readiness to keep operations running in the event of a crisis. They engaged us to design a cost-effective, scalable business continuity management, disaster recovery and crisis management solution to support their services.

How we helped

The organisation runs a large number of diverse projects involving varying numbers of staff. We visited a representative sample of projects in order to understand their operation and critical processes. We devised a framework which included a continuity plan for the head office and the regional offices, together with disaster recovery arrangements for information technology. A standard mechanism and checklist was added to this for use by all of the individual projects to enable them to easily and efficiently develop their own continuity arrangements whilst ensuring that nothing important was omitted. Finally, a management process was specified to ensure that the continuity framework was kept current, including regular testing to verify that the arrangements remained fit for purpose. The engagement was delivered according to the internationally recognised ISO 22301 (Business Continuity Management: Code of Practice).

Value added

A conventional continuity solution would have been impractical for this type of organisation to operate effectively. Instead we adopted a more flexible approach, which – whilst still aligned to the best practice promoted in ISO 22301 – was capable of effective implementation in the wide variety of projects in place. We also transferred skills to the charity to enable them to maintain the framework without the need for further consultancy.

Industry and sector:

Charity

Solutions and service area:

What our clients say

"Xcina is always responsive to any question we have during the time we are implementing data protection remediation activities, they keep us informed and understand what we need and what we’re trying to do. "

Getac Technology Corp, Legal Affairs Center

ParkMobileUK, Managing Director

"Xcina Consulting performed an annual review of our card data environment, and ensured that we are compliant with the PCI-DSS. We continue to work with their experienced QSAs, leveraging their guidance and best practices so we have the highest possible level of security controls in place."

DKB Brands, Data Protection Officer

"Xcina really helped us to kick start our data protection compliance process. They took the time to speak to all departments of the business and outlined our highest risk to lowest risk areas. The insight and guidance they provided was essential for our business to become GDPR compliant."

Portman Settled Estates Limited, Estate Secretary

"Xcina’s ongoing support has ensured that our employees feel confident when dealing with data protection matters, with best practice knowledge and expertise from consultants who have taken the time to get to know our business and our industry."

National Bank of Kuwait, Compliance Officer

"Xcina worked with us on a number of data protection matters, including subject access requests and gave helpful, practical advice which reflected their understanding of technology issues as well as legal matters."

Your World Recruitment, Group IT Director

"We have worked with with Xcina successfully for two years, initially on internal GDPR GAP analysis. We now have them engaged as our ‘Virtual DPO’ provider and regularly receive useful, pragmatic and, more importantly, actionable advice on all areas of Data Protection."

Quadrangle Research, Group Chief Operating Officer

Discover how we have supported businesses like yours >>