A crisis or catastrophe requires decisions to be made, but cannot be done with the resources ordinarily available to management. Business continuity management (BCM) comes into play when preventative measures defined in the risk management processes do not work and the level of damage from an event could assume a scale that threatens the existence of the company. The BCM framework includes ongoing business impact analysis, which identifies business-critical processes within the whole LLB Group. BCM also establishes crisis management teams, draws up emergency plans, carries out tests and keeps senior management up to date with regular reports. As part of BCM, a large-scale crisis management exercise involving a simulated ransomware cyber attack was held in 2019, for example. The exercise conducted by a third party and its main findings were: our IT security stands up very well to scrutiny and we have a broad expertise in the field.