Bankers New Paradigm · Since 1998

Business continuity management for banks and credit unions.

BNP, Inc. builds, tests and maintains business continuity programs for community and mid-size financial institutions — and finds what the documentation left out. You work directly with the person doing the work.

1998Founded, and working with financial institutions ever since
200+Consulting engagements with banks and credit unions
1Consultant on your engagement — the same one, start to finish

What we do

A full business continuity program, or the one piece of it you are short on this year. Most clients start with a single engagement and keep us on an annual cycle.

  • Business Impact AnalysisFixed price

    Facilitated sessions with your department managers, not a questionnaire. Six examiner-ready deliverables per department, priced before anything starts.

  • Virtual BC Manager

    Ongoing ownership of the continuity program for institutions that need the function without a full-time hire. Annual cycle, examiner support, documentation kept current.

  • Exercises and Training

    Tabletop exercises and staff training, written up as an exercise report with recovery gap analysis and prioritized follow-up tasks carrying named owners.

  • Risk Assessments

    Enterprise and departmental risk assessment built to hold up under FFIEC examination, tied to the business functions and resources it is supposed to cover.

  • Incident Response

    Threat assessment and incident response documentation — threats logged against the resources they actually threaten, and the response plans that exist for each.

  • Third-Party Risk

    The vendors genuinely behind the work, mapped to the functions that depend on them. Including the ones nobody wrote down.

  • Risk Data Management

    Continuity and risk data managed in Microsoft 365 — Dataverse, Power Apps and Power BI — so the record is queryable and reportable instead of scattered across documents.

Documented is not the same as tested

Nearly every institution we walk into has a continuity program on paper. Plans exist. Recovery objectives are recorded. What is missing is the dependency nobody thought to write down.

From a recent session

Nineteen minutes into a session with one department at an $8 billion bank, we reached the armored-carrier provider — the institution’s only means of physically moving currency between branches and vaults. It appeared nowhere in the department’s dependency record. It had been in continuous use the entire time.

The one resource that was linked to that function handled cash ordering, through a different vendor entirely.

Nobody was careless. The record had simply never been challenged by someone whose job that day was to challenge it.

Start with one department

$850 per department

Fixed-price Business Impact Analysis facilitation. A 30-minute planning session, a facilitation session of up to 90 minutes with one to three of your staff, and six examiner-ready deliverables. You pick the scope — one department, one division, or enterprise-wide.

Two sanitized sample reports are on the page, so you can see the actual work before we ever speak.

See the offer and the sample reports

Who we work with

Community and mid-size U.S. banks and credit unions — and inside them, the BCM coordinators, operational risk officers and CISOs carrying an annual continuity cycle across more departments than there are hours in the week.

Everything we produce is built to be entered into whatever GRC or BCM system you already run. This is not a platform, and we are not asking you to replace anything.

Talk to Steve Carroll

A 30-minute conversation is enough to tell whether there is a fit. There is no sales team here to route you through.

Located inDuncannon, Pennsylvania
Book a 30-minute session