[OR] [BCPC] [C3] Understanding Organisational Culture in BCM

Chapter 3

Understanding Organisational Culture in BCM

Introduction

Business Continuity Management (BCM) frameworks, standards, and technologies have matured significantly.

Yet, organisations continue to encounter failures during real disruptions—not because plans are absent, but because those plans are not executed effectively. 

This gap between documented capability and actual performance is often rooted in one critical factor: organisational culture.

Culture shapes how individuals perceive risk, how seriously they treat continuity responsibilities, and how they behave under pressure. It determines whether BCM is treated as a compliance exercise or embraced as a core organisational capability. 

This chapter explores the concept of organisational culture within the context of resilience and explains why it is a decisive factor in the success or failure of BCM.

Purpose of the Chapter

The purpose of this chapter is to:

•  Define organisational culture in the context of business continuity and resilience 

•  Explain how culture influences behaviour during disruptions 

•  Identify key cultural dimensions that impact BCM effectiveness 

• Highlight the limitations of policies without cultural alignment

By the end of this chapter, readers will gain a deeper understanding of how culture operates within organisations and why it must be actively managed to achieve true resilience.

Defining Organisational Culture in the Resilience Context

Organisational culture is often described as the shared values, beliefs, norms, and behaviours that influence how work is performed within an organisation.

In the context of BCM and operational resilience, culture takes on a more specific meaning:

It is the collective mindset and behaviour that determines how individuals and teams prepare for, respond to, and recover from disruptions.

This includes:

• How employees prioritise continuity and resilience in their daily activities
• How decisions are made during uncertain and high-pressure situations
• How effectively teams collaborate across functions during incidents
• How lessons are learned and applied after disruptions

A strong resilience culture ensures that BCM is not confined to policies and plans but is embedded in the way the organisation operates.

“What People Do When No One Is Watching”

A commonly used phrase to describe culture is:

“Cuure is what people do when no one is watching”

In the context of BCM, this statement is particularly relevant. During a disruption:

• There is often no time to consult detailed manuals
• Situations evolve rapidly and unpredictably
• Decisions must be made with incomplete information

In such moments, individuals rely not on documented procedures alone, but on:

• Their understanding of organisational priorities
• Their confidence in taking action
• Their willingness to collaborate and communicate

If the culture supports resilience:

• Employees take initiative rather than waiting for instructions
• Teams coordinate effectively across silos
• Decisions are aligned with organisational objectives

If the culture is weak or misaligned:

• Individuals hesitate or defer decisions
• Communication breaks down
• Response efforts become fragmented and ineffective

Thus, culture becomes the default operating system during a crisis.

Cultural Dimensions Impacting BCM

Organisational culture is multifaceted. Several key dimensions directly impact the effectiveness of Business Continuity Management.

Leadership Mindset

Leadership plays a critical role in shaping culture. The attitudes and behaviours of senior management influence how BCM is perceived across the organisation.

A strong leadership mindset towards resilience is characterised by:

• Viewing BCM as a strategic priority rather than a compliance requirement
• Actively participating in exercises and scenario testing
• Making timely and decisive decisions during disruptions
• Demonstrating accountability for resilience outcomes

Conversely, if leadership treats BCM as a checkbox activity:

• Employees are likely to adopt a similar attitude
• Engagement with BCM initiatives remains superficial
• Investment in resilience capabilities may be inadequate

Leadership sets the tone, but culture determines whether that tone is sustained throughout the organisation.

Risk Awareness

Risk awareness reflects how well employees understand and anticipate potential disruptions.

In a resilience-driven culture:

• Employees are aware of the risks relevant to their roles
• Potential issues are identified and escalated early
• Risk considerations are integrated into daily decision-making

In a low-awareness environment:

• Risks are overlooked or underestimated
• Early warning signs are ignored
• Responses are reactive rather than proactive

Effective BCM requires an organisation-wide understanding that disruptions are not hypothetical—they are inevitable.

Accountability

Accountability ensures that individuals and teams take ownership of their roles in maintaining continuity.

In a strong accountability culture:

• Roles and responsibilities are clearly defined and understood
• Individuals are empowered to act within their scope
• Performance is measured not only by business outcomes but also by resilience contributions

In contrast, weak accountability leads to:

• Uncertainty about who is responsible during disruptions
• Delays in decision-making and response
• Over-reliance on escalation rather than action

Accountability transforms BCM from a centralised function into a shared organisational responsibility.

Communication Behaviours

Effective communication is critical during disruptions, where timely and accurate information can significantly influence outcomes.

A resilience-oriented communication culture includes:

• Open and transparent sharing of information
• Clear escalation pathways
• Cross-functional collaboration
• Consistent messaging to stakeholders

Poor communication behaviours, on the other hand, result in:

• Information silos
• Misalignment between teams
• Confusion and duplication of efforts
• Erosion of stakeholder trust

Communication is not just a process—it is a behavioural norm shaped by culture.

Culture vs Policy: Why Policies Fail Without Cultural Alignment

Many organisations invest significant effort in developing BCM policies, procedures, and plans. However, the existence of these documents does not guarantee effective execution.

Policies often fail when they are not supported by the underlying culture.

The Limitations of Policy-Driven Approaches

Policies typically:

• Define what should be done
• Outline roles and responsibilities
• Establish governance structures

However, they cannot:

• Ensure that individuals internalise their responsibilities
• Influence real-time decision-making under pressure
• Overcome behavioural barriers such as fear, hesitation, or siloed thinking

The Consequences of Misalignment

When culture and policy are misaligned:

• Employees may follow procedures only during audits or exercises
• Plans may be ignored or adapted inconsistently during real incidents
• Decision-making may contradict documented strategies

This creates a gap between theoretical capability and actual performance.

Aligning Culture with Policy

To ensure that policies are effective, organisations must:

• Embed BCM principles into daily operations
• Reinforce desired behaviours through training and leadership actions
• Encourage ownership and accountability at all levels
• Continuously test and refine both plans and behaviours

When culture and policy are aligned:

• Policies become living documents rather than static references
• Employees act in accordance with organisational objectives, even in uncertain situations
• The organisation demonstrates true resilience, not just compliance

Embedding Culture into Business Continuity

Understanding culture is only the first step. The ultimate goal is to embed a resilience-driven culture into the organisation’s DNA.

This requires:

• Consistent leadership commitment
• Integration of BCM into business processes
• Continuous learning through exercises and real incidents
• Reinforcement of behaviours that support resilience

Culture cannot be changed overnight. It evolves through sustained effort, clear messaging, and consistent practice.

Organisational culture is a powerful force that shapes how Business Continuity Management is implemented and executed. It determines whether BCM remains a theoretical construct or becomes a practical, effective capability.

By understanding culture as “what people do when no one is watching,” organisations can recognise its critical role during disruptions—when formal structures may be strained, and real-time decisions define outcomes.

Leadership mindset, risk awareness, accountability, and communication behaviours are key cultural dimensions that influence resilience. Without alignment between these elements and formal policies, even the most well-designed BCM frameworks are likely to fall short.

Ultimately, culture is not an abstract concept—it is a tangible driver of resilience. Organisations that invest in shaping and strengthening their culture will be better positioned to bridge the divide between plans and performance, ensuring continuity not only in theory, but in practice.

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

	If you have any questions, click to contact us.