Participating Black & White businesses assess risks that could affect people, customers, legal duties, service delivery, information, finances or the environment. Each business owns the risks arising from its work; the Group framework supplies a consistent method rather than a guarantee of uninterrupted service.
The practical process is to understand the activity, identify credible threats, assess their possible effect, choose proportionate controls, assign responsibility and review whether those controls work. Serious or fast-moving safety, security, privacy, fraud, solvency and legal concerns are escalated promptly.
Continuity arrangements focus first on life safety and legal duties, followed by stabilisation, accurate communication and controlled recovery of priority activities. Depending on the business, planning may address people, premises, utilities, technology, information, suppliers, vehicles, equipment and customer coordination. Plans and contact arrangements are reviewed after material change or disruption and tested in a proportionate way.
Specific response or recovery commitments only apply when the responsible business has stated them in an accepted contract or service agreement. Detailed risk registers, contact trees and recovery instructions remain controlled.