Not just a fancy name
by Stuart Skelly, Martin CaddickUnlike in England, planning for business continuity management is not yet compulsory for solicitors' practices in Scotland - but it is strongly encouraged
The Journal, July 2007, page 38
Introduction
On the first of this month, the Solicitors’ Code of Conduct came into force in England & Wales. Amongst other provisions, that Code of Conduct requires solicitors in England & Wales to have procedures in place for the effective management of “the continuation of the practice of the firm in the event of absences and emergencies, with the minimum interruption to clients’ business”. In effect, the relevant provision of the Code of Conduct, rule 5.01(1)(k), requires solicitors in England & Wales to be able to demonstrate effective business continuity management to their regulator, the Solicitors Regulation Authority.
There is currently no compulsory requirement equivalent to rule 5.01(1)(k) for solicitors in Scotland. However, as readers who attended any of the Risk Management Roadshow events this year (which included three questions on business continuity management) will have learned, the Law Society of Scotland’s Insurance Committee is keen to raise awareness of the importance of business continuity planning across the profession in Scotland and to encourage Scottish practices to have at least a basic plan in place.
The benefits to firms of all sizes in having formal business continuity arrangements in place are indisputable, not only from the point of view of reducing the physical disruption to office systems, procedures and staff, but also minimising the risks of loss of valuable client business, and damage to reputation, which can result when firms experience disruptive events. Such plans need not be particularly complicated or lengthy documents.
And as the Code of Conduct also suggests, effective business continuity management forms an important part of a firm’s overall comprehensive risk management strategy.
So, as Martin Caddick of Marsh (senior vice president of Marsh and UK leader of the business continuity team with Marsh’s risk consulting practice) makes clear in an article in Managing Partner magazine, reproduced here, effective business continuity management makes good business sense for all law firms.
Stuart Skelly and Marsh - Stuart Skelly is a former solicitor in private practice who works in the FinPro (Financial and Professional Risks) National Practice at Marsh, the world’s leading risk and insurance services firm. To contact Stuart, email: stuart.skelly@marsh.com.
The information contained in this article provides only a general overview of subjects covered, is not intended to be taken as advice regarding any individual situation and should not be relied upon as such. Insureds should consult their insurance and legal advisers regarding specific coverage issues.
Marsh Ltd is authorised and regulated by the Financial Services Authority.
It is not hard to see why business continuity has grown in importance for British business in the past two decades. Every year has brought with it new risk, and it is important to be able to manage this changing environment. In the legal sector the launch of the new Solicitors’ Code of Conduct on 1 July 2007 will increase the emphasis placed on business continuity requirements, encouraging firms to keep the risk of disrupting client business to a minimum. But what is the true value of business-continuity management (BCM) to legal practices and what else is driving the need for it?
What is business continuity?
The term “business continuity” was once used interchangeably with “disaster recovery”, with a focus on helping large legal practices recover data and records. These days BCM is far more all-encompassing, with firms actively engaged in protecting their reputation and profits from the genuine exposures in their practices.
At Marsh we see and define BCM as “a process that establishes a secure and resilient business environment capable of mounting an immediate and effective response to a major incident”.
Consider these situations:
- How well will your firm cope with the unexpected long-term absence of a principal or fee-earner?
- What would you do if you had to evacuate the building during working hours, unable to return for several days?
- How will you cope with an out-of-hours emergency?
Each will require a different set of responses. It may not be much of an emergency if a particular partner is absent for a short period owing to illness, but if the absence threatens to be long term, does anyone else in the firm have the capability to pick up that partner’s workload?
In a changing environment like the legal sector – where time is of the essence in major deals and reputation and professionalism are all-important – a “tick box” business-continuity plan is not good enough. BCM must be a holistic process that identifies potential impacts and safeguards the interest of your partners and stakeholders in order to respond to any incident.
Key drivers for business continuity
The need for BCM in the legal firm is not new. Over the years many different types of event have created a wide variety of impacts – impacts that could have been lessened with better BCM practices.The Solicitors’ Code of Conduct is the latest legislative driver for BCM. But there have been others in the past such as the Lexcel Standard 2004, which started to embed BCM in the legal sector. But the need for BCM should not only be viewed as a compliance process. An effective BCM programme can help to resolve a number of key risk issues that are fundamental to law firms of all sizes.
At the top of all law firms’ agendas is reputation. Credibility and reputation are probably the number one assets of any law firm, and any mishandling of an incident can jeopardise these. Conversely, effective and timely management of crises will enhance your reputation and build the confidence of both clients and partners.
The continuation of operation and support to key clients is vital. The protection of records and relocation of staff will help to minimise any disruption to the service offered. Also, as more firms have an international presence with globalisation, the need to understand risk across borders is important. Plans should be developed to minimise the impact of disruption to international business. Practical steps for developing pragmatic plans Increasingly, larger firms have some form of business-continuity plan in place. However, a recent survey from the Gazette in 2006 indicates that 37% only have a “basic” plan and 27% of firms don’t have a business-continuity plan at all. For a busy firm that is new to BCM, developing a programme that meets the requirements of the new Code of Conduct represents a real challenge.
There are four key steps towards developing an effective and pragmatic BCM programme:
1. Business-impact analysis. Identify the critical business processes driving the business and analyse the losses expected from an interruption to each. This is the most important stage of the process, as it enables firms to determine the focus, prioritisation and resources required to successfully survive a disaster.
2. BCM strategy development. Identify the options available to your firm to recover the business (remembering to think “outside the box”, for example using manual processes instead of IT). Then develop the chosen strategy to recovery for each of the key business processes. The overall strategy will link the recovery activities undertaken in different practices, locations or departments to the common set of objectives defined within the overall BCM policy for the business.
3. Plan creation. Plans should be easy to read and follow under pressure (rather than vast complicated documents covering every eventuality). Plans should follow three distinct phases in order to focus resource on critical activities at the right time (Figure 1 please see printed version or PDF download of the Journal for tables / charts).
4. Exercising. It is vital that a company continues to maintain its plan, and regular exercising is one of the most effective ways, both of creating awareness of the programme and spotting problems in a “live” situation. Without testing, failure can be virtually guaranteed.
Checklist
BCM does not need to be complicated, but some level of preparedness is required and is a key part of prudent business-risk management. Implementing BCM can feel like a real challenge, even for larger firms that have a plan, but getting a few fundamental things right can go a long way.
- Have the partners told the business precisely what level of business continuity is expected?
- Has every member of staff been told what business-continuity management is and what to do in the event of a major incident?
- Do department heads know how they will recover the business-critical processes for which they are responsible and how the required services and resources will be provided after a disruption?
- Are critical data and records backed up and protected?
- Do partners have the procedures to follow and the necessary information to deal with a crisis?
- Are there simple written procedures, which, if followed, will protect the staff and assets, and allow the business-critical processes to recover quickly?
- Is everyone confident the plans are current and up-to-date?
CASE STUDY: BUSINESS CONTINUITY PLANNING SAVES £20 MILLION
A law firm with offices in the west of England and London was concerned its business continuity plans were limited to IT recovery, and did not provide the business with sufficient protection in the event of a disruption.
The electrical substation providing power to the firm cut off the power supply to the head office one morning, at a time when the firm was on the brink of closing a business deal worth close to £20m.
The BCM plan was successfully carried out and the firm was able to close the crucial business deal even though it was nearly two days before power was restored. The existence of the BCM plan at the time of the power loss demonstrated the professionalism and the execution of a successful response to their client, and the difference between a company with or without a BCM plan.
Martin Caddick and Marsh
Martin Caddick is a senior vice president and UK leader of the business continuity team with the risk consulting practice at Marsh, winner of CIR magazine’s 2006 Award for Excellence in Business Continuity in the insurance industry. He can be contacted at martin.caddick@marsh.com .
The information contained in this article provides only a general overview of subjects covered, is not intended to be taken as advice regarding any individual situation and should not be relied upon as such. Insureds should consult their insurance and legal advisers regarding specific coverage issues.
Current Issue FeaturesBraving the stormHow different types of legal firm are coping with the current economic downturn, and how they see their future Civil justice: where next?An abridged version of the keynote address delivered to the conference on civil justice held in Edinburgh on 20 June Title Conditions Act: new registration proceduresNew procedures are in place for deeds intended to create new real burdens, to assist solicitors in complying with the requirement for dual registration Young lawyers rebornInterview with Scottish Young Lawyers Association President Maryam Labaki on SYLA's ambitions as it relaunches Shining some more light...Second part of overview of this year's Finance Act looks at the provisions on savings, pensions, residence/domicile and business taxes, among others Power to the tribunal?An advocate's and a solicitor's views of how the Scottish Government's proposed reforms to arbitration law might work in practice Piece by pieceA progress report from England & Wales on the setting up of the complex regulatory machinery under the Legal Services Act 2007 The poor in our midstInterview with Scottish Solicitors' Benevolent Fund convener Craig Bennet, who aims to raise awareness of the Fund so it can provide more help to those in need Current Issue ArticlesShifting sandsPresident's message: with economic issues dominating the profession's thoughts, the Society is taking steps to provide advice and support to those in need A rank bad ruleOpinion by two advocates that the Faculty's response to the OFT does its members a disservice by defending the cab rank rule and by resisting the use of ABS The Society's future role in complaints handlingA reminder, in the light of reactions to the first levy issued on behalf of the new Complaints Commission, of when and how the Society's responsibilities are changing Appreciation: Lord JohnstonReport of the tribute paid in court by the Lord President Professional Practice CommitteeNew guidelines on acting as a company director; and document control and file tracking Facing the lean yearsSome advice on how to pull through a recession and be ready for the next upturn, as word goes round of legal firms looking at staff cuts and other measures (part 1 of 2) It's a web 2.0 worldThe interactive nature of web 2.0 technology presents business opportunities, while posing new risks for those with inadequate precautions as to employee internet use Questions, questionsIn reviewing their risk profiles and risk controls, all firms might benefit from conducting a self-assessment by addressing questions put by some insurers elsewhere Bare necessitiesLatest criminal cases, including offensive weapons; Moorov rule; withdrawal of representation; evidence of a deceased; contempt of court by solicitor Coming on the blind sideA technical-sounding consultation, currently open for comments, covers some significant aspects of dispute resolution in employment Relocation, relocationA recent decision explores the matters to consider when one parent wants to relocate abroad along with their child Worse than the disease?Has the UK quietly outlawed "alternative" medicine through the Consumer Protection from Unfair Trading Regulations? Sleeping bountyThe Scottish Community Foundation has a scheme to breathe new life into dormant charitable trusts Scottish Solicitors' Discipline TribunalReports relating to Eileen Agnes Coogans; Zosia Marion Elizabeth Fraser; Annaline Webster; Ian Samuel Gerard Donnelly; Mark David Sheppard Website reviewsReviews of sites of organisations concerned with domain name disputes Book reviewsReview of Child and Family Law (Sutherland) Industry standardA survey south of the border suggests that in-house work in commerce and industry doesn't always match expectations - but most in-house lawyers expect to stay Meet the committeeProfile of In-house Lawyers Group committee member Sara Scott What's in a motto?A sample of In-house Lawyers Group members' notarial mottoes, collected by ILG secretary Tricia Sim Leasing by example"Green leases" appear to be some way off yet for the UK, but a Canadian model now published shows how they might work Good call?Reply to article questioning the Donald Trump planning application call-in argues that the decision is both competent and consistent with proper operation of the system Home reports - the practice questionsOpen letter over reservations as to the Society's proposed guidelines on the operation of home reports, in so far as they deal with conflict of interest |