BCI Research Reports

The Business Continuity Institute

Don't miss...

The Business Continuity Institute publishes a wide range of research reports each year, and below is the latest version of each of these reports.

BCI Cyber Resilience Report 2017

The BCI Cyber Resilience Report is an analysis of cyber security incidents experienced by organizations across the world, and how they respond to them. These types of incidents are not rare occurrences with two-thirds of organizations experiencing at least one disruption during the previous year, while 15% report at least ten. Furthermore, one third of respondents report cumulative losses in excess of €50,000, while 13% put this figure in excess of €250,000.


Horizon Scan

The BCI Horizon Scan has become a vital resource to those working in the fields of business continuity, risk or resilience, and as such it is getting a greater number of respondents from a wider range of countries and industries. The 2017 Horizon Scan Report showed that once again it was cyber attack that was the number one threat, with data breaches remaining in second place and network outages third. Adverse weather moved up three places to enter the top five along with security incident.


Emergency Communications Report

The Emergency Communications Report considers emergency communications planning and arrangements deployed by organizations worldwide. In our globally connected world, most organizations have staff that travel overseas, making it more important for them to have an effective plan in place in order to contact geographically dispersed staff during a crisis. This is especially important given that the report revealed that 1 in 3 three organizations report their employees travel to ‘high risk’ countries.


Workplace Recovery Report

Workplace recovery remains a useful business continuity strategy with many organizations opting to deploy this strategy as a way to build overall levels of resilience. Given practitioners’ interest in this strategy, the report aims to benchmark workplace recovery arrangements among organizations worldwide. It also seeks to understand the ‘human factor’ behind workplace recovery as well as underlying attitudes which may influence its implementation.


Supply Chain Resilience Report

Currently on its eighth edition, the Supply Chain Resilience Report is an influential industry resource which tracks the origins, causes and consequences of supply chain disruption across industry sectors and regions worldwide. It also benchmarks business continuity (BC) arrangements in place - including the uptake of insurance - in different organizations which build supply chain resilience. It is one of the most comprehensive, practitioner-led studies in the field.


BCI Salary Benchmarking Report

The key finding from the Global Salary Benchmarking Report was that BCI certified members, those who have achieved one of the world’s leading credentials in business continuity, earned more than their non-certified colleagues by up to 30%. In addition to the Global Report, there are a series of region/country-specific reports that can be accessed via the members' area of the website. If you are not currently a member then click here to find out how you can sign up as an Affiliate in order to gain access to member benefits such as these reports.


Cyber Resilience Report

The BCI Cyber Resilience Report is an analysis of cyber security incidents experienced by organizations across the world, and how they respond to them. These types of incidents are not rare occurrences with two-thirds of organizations experiencing at least one during the previous year. Furthermore, one fifth take a worrying four hours or more in responding to a cyber event which has clear implications for the time taken to return to business as usual, and the ultimate cost of the incident to the organization.


ISO22301 Benchmarking Report

The ISO 22301 Benchmarking Report revealed that 6 out of 10 organizations have adopted ISO 22301, the international standard for business continuity management, and that organizations with strong top management commitment to standardising business continuity practice are four times more likely to adopt ISO 22301 than those who do not. By certifying to the Standard, organizations can provide reassurance to their stakeholders that, in the event of a crisis, it will still be able to function.


Global Retail Resilience Report

With retailers being at the frontline of modern society where sales can be made or lost in an instant, it is perhaps more important for retailers to have plans in place to manage disruption. The Retail Resilience Report, the first of its kind to be published by the BCI, was designed to highlight the challenges faced by organizations working in the retail sector. One of the main findings of the report was that more than one in five retail organizations do not have a formal business continuity policy in place.


UK 20/20 Group - The resilience challenge for the business continuity profession

To help introduce the paradigm shift to resilience that we are currently experiencing, the BCI 20/20 Think Tank (UK Group) has published a new white paper that draws on recent ideas relating to the discipline which demonstrate the vital role that business continuity has in advancing its concept and prepare BCI members for entering the next stage of progression under its umbrella.


UK 20/20 Group - Responding to the resilience challenge

The paper explains how BC practitioners should use their background as a foundation for understanding other management disciplines, as resilience practice is expected to grow into a highly technical role that will require practitioners to bridge academic knowledge and professional experience. Practitioners will also be expected to address the gap between existing technical expertise among management disciplines to decision making at the top.


US 20/20 Group - The role of business continuity professionals in the changing global threat environment

The notion of a changing threat environment considered the changing risk landscape and how it is no longer just the traditional threats like natural or man-made disasters that are being disruptive to our organizations. However, knowing the risks an organization faces enables business continuity professionals to focus on what happens next.