A self-assessment tool for your business continuity program
Assess your program against your chosen BC standard to identify its strengths and any gaps you need to close
After using BCMMetrics, we understand what our most critical functions and applications are. That helps us design our recovery exercises so we can be sure we can recover those critical applications in a timely manner.
Senior Business Continuity Specialist, Shook, Hardy & Bacon
Michael and his team are continuity professionals. They've been around for a while–they know what they’re doing, what works and what doesn't work. They're also willing to listen to other community professionals to make improvements.
Business Continuity Manager, Atrium Health Wake Forest Baptist
It helps that BCMMetrics was created by continuity professionals, for continuity professionals. You have other solutions built by computer programmers that pulled information from a questionnaire and started tweaking it. They have not had the end-user experience to really make that program pop and be beneficial to the client.
Business Continuity Manager, Atrium Health Wake Forest Baptist
The team was fantastic in assisting us. In fact, they went above and beyond and ensuring that we could get done what we needed to do. They worked hard to ensure that we were happy and where we needed to be at the end.
Information Security Officer, Bank Holding Company
A step-by-step look into Compliance Confidence
- Follow the prompts
- View your results
- Compare your score with industry benchmarks
- Assign actions and generate reports
-
To perform the assessment, the tool walks you through a series of questions about your program, saving you the need to study the standard.
-
Assessment results are displayed in an easy-to-read format that includes a color-coded needle gauge and FICO-like score.
-
After you get your score, you can leverage the data we've collected around other businesses within your industry as well as others to better understand how you compare to others.
-
Begin closing gaps by assigning actions and informing staff of their responsibilities with automated communications, and create reports to share with managers or auditors.
Get objective insight into the status of your program
Compliance Confidence gives you accurate, unbiased information about your program’s strengths and weaknesses, enabling you to move forward efficiently in closing gaps.
Gain deep knowledge of the leading BC standards
The tool is preloaded with all of the major business continuity standards, including FFIEC, ISO 22301, NFPA 1600, BCI Good Practices, and many others, allowing you to see where you stack up against any or all of them.
Save time and reduce the risk of penalties
Compliance Confidence lessens the burden on your staff and reduces the likelihood you will incur penalties for noncompliance.
Frequently asked questions
What services come with my subscription?
Subscriptions include a set number of support hours (total number based on number of modules subscribed to).
What industry standards does the tool include?
Compliance Confidence includes the following standards for assessment:
- BCI Good Practices
- ISO 22301
- NFPA 1600
- NIST 800
- FFIEC
- FINRA
- FISMA
- SEC
- OSHA Standards
- SCRM
- ISO 22331
- ISO 223362
- UK PRA Operational Resilience
- Monetary Authority Singapore BCM Guidelines
- JCAHO
How many assessments can I perform?
You can perform unlimited assessments for the duration of your subscription.
Are reports out-of-the-box or customizable?
Reports are out-of-the-box. You can request a new report through our Change Request form.
How can I export data?
Data can be exported in your reports to Excel, Word, PDF, or Print.
Can I easily update/maintain my assessments on a regular basis?
Compliance Confidence keeps a history of all assessments performed and allows you to copy the data over to a new assessment. From the newly copied assessment, you can confirm/update the scores as needed rather than do the entire assessment over again.
Do I need to be a highly skilled continuity practitioner to use the toolset?
No, we pride ourselves on the ease of use and intuitive nature of the tool, designed for all skill levels. We additionally provide training to you and your team when you subscribe to the tool.
Can I customize what standards and verticals I assess by?
You can select whatever verticals and dimensions you would like to assess by and the assessment will reflect your selections.
How will I know that the questions are up to date?
We go through the standards ourselves when there is an update to ensure we are providing you with the most current and accurate compliance criteria. When these updates are made, Compliance Confidence will show what version (by year) of the questions is being used.
Can I add my own assessment questions?
Yes. You can send our team custom questions and the respective weightings of importance for implementation in your assessment.
Can I track action items that come up during an assessment?
Yes. You can add as many action items as you need and send them to individuals within your organization for completion. Compliance Confidence will display the number of action items tied to a specific sub-dimension for you to see what progress is being made.
Can we import existing continuity data and information into the toolset?
Yes, you can import MS Excel and MS Word data and information into the toolset for use in development of your program.
What specific security measures are in place to protect my organization's data? Does the software comply with relevant industry regulations (e.g., HIPAA, PCI DSS)?
We built our infrastructure with resiliency in mind. Firewalls and Secure Socket Layer (SSL) 256-bit encryption maximize data protection. Our databases are backed up daily and securely stored with military-grade AES-256 encryption to multiple offsite locations for disaster recovery purposes. Additionally, BCMMetrics complies with most relevant industry regulations. We do not gather PHI or other similar data.