Business impact analysis, dependency mapping and tested recovery — with supplier risk linked directly to the services that keep you running.
When the supplier goes down, you go down. Map the dependency before the incident — and make the link visible to your board.
Score services by impact over time — RTO, RPO and maximum tolerable disruption.
Link services to the suppliers, systems and people they depend on.
Documented, owned, testable recovery playbooks per critical service.
Run and record scenario exercises — evidence for DHSC, regulators and the board.
Supplier compromise maps straight to service impact — exposure known before the event.
Plans re-validated on change; gaps tracked to closure.
Pre-map supplier dependencies to critical services, so ‘are we exposed?’ is answered in minutes.