The Client and Its Challenge
Because of its failure to comply with the business continuity requirements of the Sarbanes-Oxley Act, an internationally known seller of antiques and rare objects received a “management letter comment” from its external auditor. As a public company, whose reputation is a cornerstone of its present success and future prospects, such a communication is potentially very damaging.

Recognizing the need to immediately correct the situation, the client turned to Marsh because it had the resources necessary to complete the project in a timely manner and flexibility in accomodating the client’s hectic sales seasons.

The Risk Consulting Solution
Working in close conjunction with the client’s senior management, Marsh’s Business Continuity Planning Team developed a business continuity program to address the client’s needs. The program first identified existing vulnerabilities through a combination of interviews, workshops, and documentation review. Based on the results of that research, contingency plans were created that included manual work-around procedures (maintaining business functions if IT systems are unavailable), data restoration processes, and maintenance and testing procedures. The entire process included in-depth coordination with the client’s senior management.

Results
Upon completion, the business continuity plan was thoroughly tested by the client to ensure its functionality, completeness, and accuracy. Because of the plans put in place by Marsh, the auditor issued no further “management letter comments.” The client also is using its new in-house capabilities as a marketing tool to prospective clients, positioning itself as the smart choice because of its ability to withstand the unexpected.