According to the Disaster Recovery Institute (DRI), the actual scope of work of a BC or resilience professional hasn’t really changed. Organizations still must have high-quality response and damage limitation plans formulated by skilled planners. The change in the resilience profession, however, is moving away from a technical specialization and into mainstream business risk management. DRI reports that consolidation of resilience disciplines has increased over the past year. The main result of this is that fewer organizations have independent business continuity departments, with BC professionals being incorporated into existing risk management or information security divisions.

For most organizations, putting great cybersecurity in place requires a massive uphill trek. Many forms of change are required – technology, process, talent, and more. Here, cyber leaders focus inward, working to get capabilities in place and reduce identified risks. But fundamentally, you need externally-driven change too, where other enterprise leaders (and key partners outside of your business) believe in the cyber mission so deeply that they can’t live without it.