Stopping the "Tick-Box" Trap: How to Secure Real SLT Buy-In for Your BCMS

Getting SLT on board with your BCMS can feel like uphill work. Discover how to move past tick-box compliance, speak executive language, and secure real leadership buy-in.

Paul O'Brien
3 min read
đź’ˇ
Disclaimer: The scenarios, reflections, and insights shared in this article are based on general industry observation and personal professional opinion. They do not represent first-hand experiences, specific incidents, or official policies of my current or past employers.

Getting Senior Leadership Teams (SLT) or board members on board with a Business Continuity Management System (BCMS) can feel like uphill work.

If you are lucky, someone on your board is an active believer. More often, they see BCMS as a tick-box compliance exercise—an operational frustration that consumes time, effort, and budget without delivering obvious revenue.

So how do you secure genuine SLT buy-in? What is the trick to getting them to see the bigger picture? And how do you overcome the classic response: "That will never happen to us"?

The Reality Gap in Business Continuity

As a BC professional, it feels bizarre that leaders with strategic oversight need convincing about the necessity of operational resilience.

Have they forgotten the lessons of COVID-19? Are they blind to ongoing geopolitical volatility, fragile global supply chains, and state-sponsored cyber threats targeting critical infrastructure? At what point did corporate strategy quietly pivot back to: "We'll just deal with a crisis if it happens"?

Crucial to any BCMS is 100% commitment from top management. SLT must actively champion continuity from board level down to front-line operations.

Yet many BC practitioners get zero face time with senior executives. Instead, they report to a middle-management sponsor who would prefer to quietly file plans away in a drawer and pray the worst never happens.

To fix this, we have to start by understanding why SLT views BCMS so differently from the person tasked with keeping the business running.

Mind the Knowledge Gap

You have likely completed your BCI training, digested the ISO 22301 standards cover-to-cover, and actively track industry news. You know how quickly ill-prepared organisations crumble under pressure.

Your SLT, however, has likely never heard of the BCI or Good Practice Guidelines. Acronyms like BIA, MTPD, and MCBO mean nothing to them. In their eyes, a BCMS is a static folder containing a call tree and a basic IT recovery checklist.

You are the subject expert. It is your job to translate BC jargon into strategic value so leadership actively wants to embed resilience into the business culture.

Step 1: Secure the Room (Do Not Send a PDF)

Reach out to your internal BC sponsor and request a dedicated 30-minute agenda slot at an upcoming SLT meeting.

Do not simply email a pack of policies and recovery plans for them to sign off. Pitch this meeting as a high-level briefing on organisational exposure, and reassure them that you will handle all the preparation.

Step 2: Pitch Scenarios, Not Standards

Build a concise, impactful slide deck.

  • Use Relevant Examples: Lead with recent, high-profile operational failures—ideally from your industry. Show what broke, why it broke, and what it cost them.
  • Mirror the Threat: Show how that exact scenario would play out within your organisation. Quantify the impact using financial loss, operational downtime, and reputational damage.
  • Ask Hard Questions: Move the conversation away from compliance checkboxes by posing real-world pressure scenarios:
    • "How do we maintain critical operations if an outage hits during our busiest commercial quarter with skeleton staffing?"
    • "If our primary single-source supplier goes down tomorrow, what is our immediate operational workaround?"
    • "How do we communicate with all staff within 30 minutes if our core IT infrastructure or office facilities suddenly become completely inaccessible?"

Step 3: Sell Competitive Advantage

Emphasise that a BC professional always prepares for worst-case outcomes—not out of pessimism, but to build operational agility.

Frame resilience as a commercial advantage: an organisation that recovers in 4 hours while its main competitor takes 4 days captures market share during an industry crisis.

Demonstrate why embracing business continuity actively protects the bottom line, whereas merely embedding it on paper leaves the firm vulnerable.

Take the Stage with Confidence

Securing executive buy-in requires stepping into the spotlight. Do not be intimidated by feeling exposed—this is your opportunity to demonstrate true professional authority.

Be assertive, confident, and factual. Crucially, strip out all internal BC jargon. The moment an executive gets lost in terminology, you lose their engagement.

Expect to be challenged. They are your audience—sell the strategic value of your strategy. They may hold more senior titles and command higher salaries, but when it comes to keeping the business operational during a crisis, you are the subject authority in the room. Own it.