⚠ Incident Detected — Business Disruption
Severity: HIGH · Primary site at risk · BCM team notified
DR Plan Activated
Cold Site now active. Data replication via AWS S3. RTO target: 4 hours.
[ Initialising failover... ]
BCP Active BCP engaged · Cold Site operational · Services restored RTO Met
BCM & Cybersecurity Professional

Gayatri
Vivek Chavan

Business Continuity Management Analyst with 5.5+ years building resilient organisations across Banking, eCommerce, Manufacturing and Healthcare — ensuring operations never stop, whatever the disruption.

ISO 22301 Lead Implementor ISO 31000 Risk Management ISO 27001 ISMS Abu Dhabi, UAE
Gayatri Chavan
94%
Business continuity rate
during COVID-19
24+
Mission-critical
client units
5.5+
Years BCM Experience
24+
Global Clients Served
52%
ISMS Posture Improvement
90%
Uptime on AWS DR

The BCP Lifecycle in Practice

A business continuity programme is a continuous cycle — not a one-time project. Click each phase to see how it has been delivered for real clients.

Business Continuity ISO 22301 POLICY & GOVERNANCE Phase 1 BIA & RTO/RPO Phase 2 STRATEGY & PLANNING Phase 3 TESTING & VALIDATION Phase 4 AWARENESS & TRAINING Phase 5 AUDIT & IMPROVEMENT Phase 6

↑ Click any phase to explore deliverables and tools

ISO 22301
Primary framework
200+
Business units scoped
52%
ISMS posture lift
Phase 1 — Policy & Governance

Establishing the foundations: BCM scope, policy framework, roles and responsibilities, and alignment to ISO 22301 requirements. At Mashreq Bank, led restructuring of Information Security policies across 200+ business units, creating a governance baseline that achieved a 52% improvement in security posture.

Archer PrismISO 22301ISO 27001Gap AnalysisPolicy Development
RTO/RPO
Defined for every asset
24+
Clients analysed
Critical vs
non-critical classification
Phase 2 — Business Impact Analysis & RTO/RPO

Performed BIA across 24+ global clients — from McDonald's to Volkswagen — identifying critical activities, dependency chains, and defining Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO). Used AutoBCM to standardise outputs and create executive-ready dashboards.

AutoBCMBIA MethodologyRTO/RPO DefinitionExcel DashboardsThreat Assessment
90%
AWS DR uptime achieved
Multi-region
AWS architecture
SaaS
eCommerce DR delivered
Phase 3 — Strategy & Planning

Designed and executed IT Disaster Recovery plans — including a full AWS Cloud DR strategy for Tata Cliq's SaaS platform using multi-region replication. Developed Business Continuity Plans for critical business operations, integrating IT DR alignment with broader BCM strategies.

AWS Elastic DRS3 ReplicationCloudWatchAuto BackupBCP Documentation
92%
BCP test efficiency
3 types
of drill conducted
94%
continuity during COVID-19
Phase 4 — Testing & Validation

Conducted Call Tree, Simulation and Walkthrough test drills for 24+ mission-critical client units. During COVID-19, led execution of BCPs for all clients simultaneously, achieving a 94% business continuity rate through work-from-home strategies with a 92% BCP test efficiency rate.

Call Tree TestsSimulation DrillsWalkthrough TestsIncident ResponseCrisis Management
Sr. Mgmt
Training delivered
BCP Coord.
Trained & certified
Feedback
loops implemented
Phase 5 — Awareness & Training

Designed and delivered ISO 22301 BCMS awareness training for employees, BCP Coordinators, and Senior Management. Created targeted awareness decks and follow-up feedback mechanisms to ensure continuous improvement of BCM culture. Provided training for both Grant Thornton clients and Capgemini's multi-sector portfolio.

BCM Awareness DecksStakeholder ReportingPowerPoint TrainingFeedback Loops
Internal
ISO 22301 audits led
ISO 27001
Technical audits conducted
Risk reg.
& treatment plans
Phase 6 — Audit & Continual Improvement

Conducted ISO 27001 technical audits covering antivirus, 2FA, VPN, change management, vulnerability reports, and onboarding/offboarding reconciliation for Volkswagen, BMW, Canon, IKEA, and NBC Universal. Supported ISO 22301 certification readiness, developed risk registers, and presented actionable mitigation plans to stakeholders.

ISO 27001 AuditVulnerability AssessmentRisk RegistersAccess Control MatricesSailPointSeclore

Professional Experience

5.5+ years building and auditing BCM frameworks across global consultancies.

Jun 2022 – Jun 2023 · Mumbai, India
Grant Thornton
Cybersecurity & BCM Consultant
  • Delivered end-to-end BCM and ISMS consulting for Mashreq Bank, HDFC Bank and Tata Cliq across BFSI and eCommerce domains
  • Architected AWS multi-region Disaster Recovery for Tata Cliq's SaaS platform — achieving 90% uptime (Elastic DR, S3 Replication, CloudWatch, Auto Backup)
  • Led gap analysis and restructuring of IS policies for 200+ business units at Mashreq Bank — 52% improvement in security posture using Archer Prism
  • Conducted RBI compliance audits for HDFC Bank validating Lender Service Provider adherence
  • Designed and delivered BCM & Information Security awareness training for employees and senior management
ISO 22301 ISO 27001 AWS Cloud DR Archer Prism RBI Compliance
Feb 2018 – Jun 2022 · Mumbai, India · 4.5 Years
Capgemini Technologies
Associate Consultant – Business Continuity & Information Security
  • Performed BIA, defined RTO/RPO, developed BCPs and ran test drills for 24+ clients across Manufacturing, Automotive, BFSI, Airline, Food and Entertainment
  • Spearheaded COVID-19 BCP execution for 24+ mission-critical units — 94% continuity rate, 92% test efficiency through WFH strategies
  • Conducted ISO 27001 technical audits for Volkswagen, BMW, Canon, IKEA and NBC Universal
  • Built risk registers, access control matrices and risk treatment plans; reported findings to stakeholders
  • Managed Global BCM stakeholder relationships; monitored emerging risks and reported service impact
BIA & RTO/RPO ISO 27001 Auditing COVID-19 BCP AutoBCM Risk Management

Clients & Deliverables

BCM and ISMS programmes delivered across 24+ organisations spanning 6 industries.

Banking · BFSI
Mashreq Bank
IS policy restructuring for 200+ business units via Archer Prism. 52% improvement in information security posture. ISO 27001 & 27002 applied.
Grant Thornton
Banking · BFSI
HDFC Bank
RBI compliance audits validating Lender Service Provider adherence. Evidence collection and stakeholder alignment to regulatory standards.
Grant Thornton
eCommerce
Tata CLiQ
End-to-end AWS Cloud DR design and execution for SaaS platform. Multi-region setup with Elastic DR, S3 Replication, CloudWatch — 90% uptime achieved.
Grant Thornton
Automotive
Volkswagen
ISO 27001 technical audit — Antivirus, 2FA, VPN, Change Management, Vulnerability Reports, Onboarding/Offboarding reconciliation.
Capgemini
Automotive
BMW
Comprehensive IS auditing per ISO 27001. BCP development, RTO/RPO definition and test drill validation for critical operations.
Capgemini
Healthcare · Life Sciences
Becton Dickinson
Full BIA, RTO/RPO definition, Business Continuity Plan development and test drill execution (Call Tree, Simulation, Walkthrough).
Capgemini
Industrial
Atlas Copco
BCM programme implementation. Business Impact Analysis and RTO/RPO definitions across manufacturing and critical service units.
Capgemini
Food & Beverage
McDonald's
COVID-19 BCP execution and WFH strategy. Business Continuity Plan development and test drill validation for supply chain and operations.
Capgemini
Pharmaceutical
Bayer
BCM programme delivery with BIA, RTO/RPO parameters and continuity plan development aligned to ISO 22301.
Capgemini
Retail
IKEA
ISO 27001 technical information security audit covering access management, vulnerability management, and onboarding reconciliation.
Capgemini
Imaging · Technology
Canon
ISO 27001 audit and BCM programme support. Risk register development with actionable mitigation plans presented to stakeholders.
Capgemini
Media & Entertainment
NBC Universal
Information Security technical audit per ISO 27001. Change Management, VPN and vulnerability reporting reviewed for broadcast operations.
Capgemini

Skills & Frameworks

A specialist toolkit built across two global consultancies and 5+ years of hands-on delivery.

BCM Frameworks
ISO 22301 · ISO 31000 · BCP Development · BIA Methodology
ProficiencyExpert
Information Security
ISO 27001 · ISO 27002 · ISMS · Audit · Access Control
ProficiencyExpert
Cloud DR
AWS Elastic DR · S3 Replication · CloudWatch · Auto Backup
ProficiencyAdvanced
BCM Tools
AutoBCM · Archer Prism · SailPoint · Seclore
ProficiencyAdvanced
Risk Management
ISO 31000 · Risk Registers · Threat Assessment · Mitigation Plans
ProficiencyExpert
Regulatory Compliance
RBI Guidelines · Vendor Auditing · Evidence Collection
ProficiencyAdvanced

Certifications & Awards

BSI · ENR-00527305
ISO 27001:2022 Lead Implementor
Issued by British Standards Institution
BSI · ENR-00527305
ISO 22301 BCMS Internal Auditor & Implementor
Issued by British Standards Institution
BSI · ENR-00750359
ISO 22301:2019 BCMS Awareness
Issued by British Standards Institution
BSI · ENR-00750359
ISO 31000:2018 Risk Management
Issued by British Standards Institution
Grant Thornton · Oct 2022
Spot Award for Ace Performance
Recognised for outstanding client delivery
Capgemini · Sep 2021
Customer Delight Award for Outstanding Performance
Recognised for exceptional client satisfaction

Get in Touch

Open to BCM Analyst, ISMS Specialist and Business Continuity Consultant roles in the UAE and globally.

Connect on LinkedIn