A9 AdvisoryBusiness Continuity and Resilience
Business impact analysis, recovery plans and crisis readiness. We build continuity programmes that work under pressure: business impact analysis, recovery strategies, plans and exercises aligned with NCEMA 7000 and ISO 22301.
The Challenge
Continuity plans often sit on a shelf, recovery targets are unrealistic and exercises are skipped. When disruption hits, teams improvise.
How We Help
We build continuity programmes that work under pressure: business impact analysis, recovery strategies, plans and exercises aligned with NCEMA 7000 and ISO 22301.
Our GRC specialists have more than 15 years of experience with UAE government entities and private sector organisations across the region, and hold certifications including CISA, CRISC, ISO 27001, ISO 22301, ISO 42001 and ISO 27701. We also build Arbor GRC, our own platform for running these programmes.
What We Deliver
Business Impact Analysis
Critical activities, recovery targets and dependencies for each department.
Recovery Strategies
Practical options for people, sites, technology and suppliers.
Continuity and Crisis Plans
Clear plans that people can follow in a real event.
Exercises
Tabletop, walkthrough and simulation exercises with lessons learned.
Disaster Recovery Alignment
IT recovery aligned with business recovery targets.
What You Can Expect
- Recovery targets that are realistic and tested
- Leaders ready to manage a crisis
- Compliance with NCEMA 7000 and ISO 22301
How We Work
Assess
Understand your obligations, risks and current state.
Design
Build the framework, policies, controls and governance.
Embed
Train owners and run the first cycle alongside them.
Assure
Audit, report and prepare for regulators and certification.
Standards and Frameworks
Frequently Asked Questions
What is NCEMA 7000?
The UAE's business continuity management standard issued by the National Emergency Crisis and Disaster Management Authority, expected of government entities and critical sectors.
How often should we exercise?
At least annually, with more frequent exercises for critical services.
Often Combined with
Regulatory Compliance
UAE IA, Dubai ISR, ADHICS, NCEMA 7000 and sector regulations.
Governance, Risk and ComplianceISO Certification Readiness
ISO 27001, 22301, 42001, 27701, 20000 and 9001.
Governance, Risk and ComplianceEnterprise Risk Management
Link risk to strategy and make better decisions.
Talk to an Adviser
Tell us what you are working on and we will bring the right specialists to the conversation. We reply within one working day.