The updated corporate governance requirements in the King III report set out four key focus areas for IT governance: strategic alignment, value delivery, risk management and resource management. Disaster recovery and business continuity are explicitly mentioned as risk management elements; if they’ve never been an item on your board agenda, your governance may be open to question.

“Today’s investors are very risk-averse,” says Ansophie Strydom, GM of marketing at ContinuitySA. “There may be no legal obligation to comply with King III, but if you want to attract the right investors, you will be forced to have plans in place that can withstand scrutiny.”