About Us

What we do

When something goes wrong in your organisation (a cyber-attack, a flood, a supply chain failure) the decisions made in the first hours matter most. Who's in charge? What's the plan? Who needs to know?

We help Australian organisations answer those questions before the real disaster strikes.

Continuity Matters is an Australian consulting firm specialising in business continuity planning, crisis management, IT Disaster Recovery Planning and organisational resilience. We work with organisations across health, construction, mining, financial services, manufacturing and the public sector.

Our core work covers four connected areas:

1. Business continuity planning

We run Business Impact Analyses to identify your most critical activities, develop Business Continuity Plans that your people can actually use, and review IT Disaster Recovery arrangements to make sure systems can be recovered in the time your business requires.

2. Crisis management

We develop Crisis Management Plans and facilitate exercises that put your leadership team through their paces, so when something real happens, they're not making it up as they go.

3. IT disaster recovery planning

We help you develop IT Disaster Recovery Plans, conduct exercises and help you test the recoverability of your critical applications, in particular, those hosted by Third Parties.

4. APRA compliance

We help APRA-regulated entities meet their obligations under APRA’s CPS230 (Operational Risk Management) standard. Our services include establishing a sustainable governance framework that supports the development or enhancement of a Business Resilience Program, its maintenance during business-as-usual (BAU) operations and in the event your organisation suffers a crisis.

We conduct a Business Impact Analysis to establish the Critical Operations in your business. We identify the resources required to complete the operations and importantly, the role of third party service providers, especially cloud services and Agentic AI. The Business Continuity Plan will contain the Recovery Procedures (or workarounds) to help you re-establish your Critical Operations in the event you suffer an outage.

We validate the documentation by conducting a crisis management exercise with your crisis management team.

Our approach

We follow a crawl-walk-run methodology. The goal isn't a perfect plan; it's a working plan that improves over time. We focus on getting the foundations right, testing them through exercises and helping you build capability over time.

We are particularly focused on establishing your crisis governance. We recommend the establishment of one Crisis Management Team (CMT), comprised of your CEO and Senior Leadership Team. Your CMT will make the big decisions, approve crisis communications and liaise with the Chair of your Board.

If a part of your organisation suffers an outage or disruption, this impacted team will assess the incident, manage the disruption on the ground, liaise with emergency services and make recommendations to the CMT.

We're also direct about what we find. If your IT systems can't be recovered in the time your business requires (which is more common than most organisations expect), we'll tell you and help you work out what to do about it.