Amstelveen Amstelveen

Business Continuity Management

Disruptive events can significantly impact operations, but strong Business Continuity Management (BCM) helps reduce and manage those risks. Amstelveen is uniquely positioned to partner with organisations across sectors to enhance business resilience and navigate through crisis. Our team brings deep expertise in risk, resilience, and practical delivery, uniquely positioning us to uplift Business Continuity capabilities.

What sets us apart

Our service offerings cover the entire BCM lifecycle and equip organisations with the tools and strategies to help prepare for and navigate through any crisis.

01

Deep GRC expertise

combined with hands-on BCM delivery

02

Practical experience

across the full BCM lifecycle

03

Tailored solutions

to best fit your needs and the regulatory environment

04

Certified Personnel

in ISO 22301 Lead Implementer

What we deliver

Uplift of Business Continuity Planning

We facilitate Business Impact Analysis (BIA) workshops and develop tailored Business Continuity Plans (BCPs) to ensure your organisation is prepared for disruptions. Our approach enhances preparedness and fosters a culture of resilience.

Facilitating Business Continuity and Crisis Management Exercises

We design and conduct realistic exercises to test and uplift organisations’ response capabilities. Through simulations and feedback, we identify areas for improvement and provide actionable recommendations.

Managing BCM Uplift Programs

We manage end-to-end BCM uplift programs, from assessment to implementation, ensuring BCM capabilities and tooling align with best practices, preparing clients to effectively respond to unexpected business continuity events.

Conducting BCM Reviews

We work with Internal Audit, Risk, and Business Teams to assess key risks and controls within our clients’ BCM framework, identifying areas for improvement and developing control uplift plans to enhance organisational resilience.

Preparing for Business Continuity Certification or Audit Readiness

We assist in preparing clients to achieve certifications like ISO 22301 and SOC 2 by conducting gap analyses and implementing action plans to address deficiencies, enabling our clients to be audit-ready and compliant.

Resource Augmentation to Support BCM Capabilities

We provide experienced professionals to augment your BCM team, offering expertise and support for both short-term projects and long-term needs, ensuring our clients have the right resources to achieve resilience goals. 

Why Leading Enterprises Choose Us

01

Trusted Advisors

We understand the scale, complexity, and regulatory scrutiny of leading organisations across Australia and New Zealand, and across key industries such as Financial Services, Telecommunications & Infrastructure, Aviation, Energy, Public & Government and Asset Management.

See our experience here
02

GRC Expertise

Our team combines deep Governance, Risk and Compliance expertise with hands-on BCM delivery, including developing business continuity policies, performing BIAs, and creating tailored response plans, embedding BCM into broader risk programs, and aligning with regulatory expectations. Our team has also facilitated crisis exercises and conducted BCM audits.

See our experience here
03

Future-Focused

Our mission is to enable organisations to build ongoing resilience, equipping them with capability and insights, encompassing business continuity management planning for people, systems, and processes, as well as third-party suppliers.

See our experience here
Industry Partnerships and Credentials

Credentials

  • ISO 22301 Business Continuity Management Systems certified lead implementers.
  • APRA CPS 230 Operational Risk Management implementation, where we have deep specialists in each component of CPS 230; i.e. Operational Risk Management, Vendor Risk Management and Business Continuity Management.
  • Security of Critical Infrastructure (SOCI) Act readiness for organisation that are deemed critical or operate systems of national significance.
  • Hands-on, lived experience in leading major crises and business disruptions across both financial and non-financial industries.

Learn more about our experience
Our Experience

Our Experience

Major Multinational Financial Services Group

CPS 230 Project Implementation and Change Management

Amstelveen supported a Line 1 risk function within a major Australian bank to implement CPS230 Operational Risk Management requirements and prepare for APRA visitation. This included completing CPS230 gap assessments at Stage Gate Reviews, followed by delivery of uplift activities across business continuity, service provider and operational risk capabilities. Amstelveen facilitated process mapping for critical operations management, uplifted Business Continuity Plans, and supported the identification and governance of material service providers relevant to critical operations. They also planned and executed the Change Management program, encompassing training sessions, website updates, in-person events and readiness assessment across the management level through to the C-suite. The engagement strengthened alignment between operational risk, business continuity, and regulatory expectations under CPS230.

Read more Show less

Australian Financial Technology Company

Crisis Scenario Design and Simulation

The client is a financial services organisation delivering payments and banking-related services and subject to APRA CPS 230 operational resilience requirements. Amstelveen was engaged to support the uplift of Business Continuity capabilities through the identification and development of plausible disruption scenarios aligned to critical operations and third-party dependencies. This included reviewing existing resilience artefacts, developing a scenario library, and assessing the potential impact of severe but plausible events. Amstelveen designed and facilitated an executive-level crisis simulation, focused on a critical service provider outage impacting payments, to test response effectiveness, decision-making, and communication protocols. The engagement resulted in documented observations and recommendations to enhance crisis response, recovery strategies, and operational resilience maturity.

Read more Show less

Major Australian Not-for-Profit

Crisis Management and Business Continuity Management Uplift

The client is a major Australian not-for-profit organisation operating in a complex and evolving risk environment, with increasing cyber threats and operational complexity. Amstelveen was engaged to uplift crisis preparedness through the development of a Crisis Management Plan (CMP) and supporting governance framework. This included defining processes for crisis identification, escalation, and response, alongside the development of tailored response playbooks. The engagement also involved designing and facilitating a cyber crisis simulation, enabling the Executive Leadership Team to exercise decision-making under pressure and test coordination across business units. The exercise assessed crisis communications, stakeholder mobilisation, and operational response, resulting in targeted recommendations to strengthen organisational resilience and continuity capability.

Read more Show less

Major International Bank

CPS230 Operational Risk and Resilience Uplift

Amstelveen supported a major international institutional bank in preparing for APRA CPS230, with a focus on enhancing and augmenting business continuity and operational resilience practices. This supported involved cataloguing key processes within their critical operations, performing detailed risk assessments and control uplift, and feeding this information through to inform a pragmatic and essential business continuity plan for these critical operations. Amstelveen delivered target recommendations to further improve how the bank demonstrates adherence to continuity obligations and continues to improve its overall resilience posture.

Read more Show less

Australian Life Insurer

CPS230 Uplift & Operational Resilience Enhancement

Amstelveen supported the client in its implementation of CPS 230, with work focused across Operational Risk and Material Service Providers (MSPs). This included assisting with the documentation of Critical Operations (COs) risk profiles. We also designed and implemented standardised vendor risk assessment templates, and enhanced processes for monitoring third-party performance and risk. We assisted with the delivery of training to key business stakeholders on the uplifted framework. Amstelveen was subsequently engaged to support the client's CPS 230 Business Continuity. This involved updating Business Continuity Plans, developing CO-specific, cross-CO and MSP-related scenarios and drafting expected response actions. Our work also involved developing a Business Continuity testing program and reviewing the Business Continuity Policy to reflect current continuity, testing and governance expectations.​

Read more Show less

Download our Capability Statement

Business Continuity Management

Download our Capability Statement here

Ready to respond to the unexpected with confidence?

Partner with experts who understand and make sense of real-world challenges of navigating crises. Wherever you are in your BCM journey, we will guide you through every step of the way..

Talk to us today