Bankers New Paradigm · Since 1998
Business continuity management for banks and credit unions.
BNP, Inc. builds, tests and maintains business continuity programs for community and mid-size financial institutions — and finds what the documentation left out. You work directly with the person doing the work.
What we do
A full business continuity program, or the one piece of it you are short on this year. Most clients start with a single engagement and keep us on an annual cycle.
-
Business Impact AnalysisFixed price
Facilitated sessions with your department managers, not a questionnaire. Six examiner-ready deliverables per department, priced before anything starts.
-
Virtual BC Manager
Ongoing ownership of the continuity program for institutions that need the function without a full-time hire. Annual cycle, examiner support, documentation kept current.
-
Exercises and Training
Tabletop exercises and staff training, written up as an exercise report with recovery gap analysis and prioritized follow-up tasks carrying named owners.
-
Risk Assessments
Enterprise and departmental risk assessment built to hold up under FFIEC examination, tied to the business functions and resources it is supposed to cover.
-
Incident Response
Threat assessment and incident response documentation — threats logged against the resources they actually threaten, and the response plans that exist for each.
-
Third-Party Risk
The vendors genuinely behind the work, mapped to the functions that depend on them. Including the ones nobody wrote down.
-
Risk Data Management
Continuity and risk data managed in Microsoft 365 — Dataverse, Power Apps and Power BI — so the record is queryable and reportable instead of scattered across documents.
Documented is not the same as tested
Nearly every institution we walk into has a continuity program on paper. Plans exist. Recovery objectives are recorded. What is missing is the dependency nobody thought to write down.
From a recent session
Nineteen minutes into a session with one department at an $8 billion bank, we reached the armored-carrier provider — the institution’s only means of physically moving currency between branches and vaults. It appeared nowhere in the department’s dependency record. It had been in continuous use the entire time.
The one resource that was linked to that function handled cash ordering, through a different vendor entirely.
Nobody was careless. The record had simply never been challenged by someone whose job that day was to challenge it.
Start with one department
Fixed-price Business Impact Analysis facilitation. A 30-minute planning session, a facilitation session of up to 90 minutes with one to three of your staff, and six examiner-ready deliverables. You pick the scope — one department, one division, or enterprise-wide.
Two sanitized sample reports are on the page, so you can see the actual work before we ever speak.
See the offer and the sample reportsWho we work with
Community and mid-size U.S. banks and credit unions — and inside them, the BCM coordinators, operational risk officers and CISOs carrying an annual continuity cycle across more departments than there are hours in the week.
Everything we produce is built to be entered into whatever GRC or BCM system you already run. This is not a platform, and we are not asking you to replace anything.
Talk to Steve Carroll
A 30-minute conversation is enough to tell whether there is a fit. There is no sales team here to route you through.
Book a 30-minute session