01
Business Continuity Management
Build or mature a BCM program that is governed, understood and ready to be tested.
- BCM program development
- BIA and continuity planning
- Governance, policies and standards
- ISO 22301 alignment
Enterprise Resilience • Business Continuity • Disaster Recovery
Build resilience before disruption happens.
I help organizations strengthen Business Continuity, Disaster Recovery, Crisis Management and Operational Resilience by connecting business requirements, technology dependencies and risk.
Experience
Resilience is more than a plan.
Effective resilience connects critical services, people, processes, technology, third parties, recovery capabilities and risk into one practical picture.
Public Safety
Crown Agencies
Financial Services
Technology & Risk
Services
Practical support for real-world disruption.
Focused services for organizations building, improving, testing or governing resilience capabilities.
02
Disaster Recovery
Assess whether technology recovery capabilities can meet business expectations.
- DR strategy and plans
- RTO/RPO assessment
- Cloud and on-prem recovery
- DR testing and validation
03
Business Impact Analysis
Identify what matters most and translate business requirements into actionable recovery requirements.
- Critical service mapping
- Maximum allowable outage
- Dependency mapping
- Recovery requirements
04
Crisis Management & Exercises
Practice leadership response before a real disruption tests the organization.
- Crisis response frameworks
- Tabletop exercises
- Major incident exercises
- Lessons learned and actions
05
Operational Resilience & Risk
Connect continuity, technology risk and resilience to stronger governance and decisions.
- Resilience assessments
- Risk registers and metrics
- Executive reporting
- Resilience roadmaps
06
Third-Party Risk & Resilience
Understand continuity and recovery risks created by critical vendors and service providers.
- Vendor risk assessments
- Continuity requirements
- SLA and recovery expectations
- Risk mitigation recommendations
Focused engagements
Start with a clear business problem.
These are starting points. The scope can be adjusted to your organization's needs.
BCM Health Check
Review governance, BIA, plans, dependencies, testing and documentation to identify the most important gaps.
Deliverable: Current-state assessment, prioritized findings and practical improvement roadmap.DR Readiness Assessment
Compare business recovery expectations with RTO/RPO targets, technical dependencies, plans and test evidence.
Deliverable: DR readiness report and prioritized remediation actions.BIA & Critical Services Assessment
Identify critical services, maximum allowable outages and dependencies across people, process, technology and vendors.
Deliverable: BIA findings and documented recovery requirements.Crisis / Tabletop Exercise
Facilitate a realistic disruption scenario to test leadership decisions, escalation, communication and recovery coordination.
Deliverable: Exercise report, lessons learned, gaps and corrective actions.My approach
Assess. Prioritize. Test. Improve.
A practical resilience cycle that turns findings into action.
01 AssessUnderstand the current state, critical services and requirements.
02 IdentifyMap dependencies, capability gaps and risk exposure.
03 PrioritizeFocus leadership attention on the most important actions.
04 TestValidate plans and recovery capabilities through exercises and testing.
05 ImproveTrack corrective actions and strengthen resilience over time.
Selected experience
Experience you can put to work.
Selected examples from my professional background, presented without confidential client information.
25+
Tier 1 applications
Led an annual DR testing program covering more than 25 Tier 1 applications, including strategy, plans and acceptance validation across cloud and on-prem environments.
18+
Years in resilience & recovery
Designed, governed and improved continuity and recovery programs across public safety, Crown agencies and financial services.
Enterprise BCM
Established an organization's first Business Continuity Management System aligned to ISO 22301 and DRI Professional Practices, alongside enterprise risk assessments aligned with ISO 31000.
Crisis & major incident readiness
Designed crisis response capabilities, developed major incident plans and supported incident command during significant operational events.
About Surinder
Business. Technology. Risk. Resilience.
I am an Enterprise Resilience, Business Continuity and Crisis Management professional with more than 18 years of experience across public safety, Crown agencies and financial services.
My experience spans Business Continuity, Disaster Recovery, Crisis Management, Operational Resilience, Enterprise Risk Management and Third-Party Risk Management.
I have worked with business, technology, security, operations and executive stakeholders to identify critical services, understand dependencies, establish recovery requirements, test recovery capabilities and strengthen organizational resilience.
My approach is practical. Resilience programs should not simply exist on paper. They need to be understood, exercised, measured and continuously improved.
Email: surinder_bawa@outlook.com
LinkedIn: View My LinkedIn Profile ↗
Let's connect
Strengthen your resilience before the next disruption.
Whether you are building a BCM program, preparing for a DR test, reviewing recovery capabilities or strengthening resilience governance, let's discuss where you need support.