WHY Business Continuity Planning

1

WHY Business Continuity Planning

• Business Interruption
• Employees
• Critical Information
• Business Resumption

2
If your normal business operations are
interrupted .

• Mission Critical Business Functions

• Business Continuity Plan

• Severity of Business Interruption

3
Main Menu
1
Business Continuity, Disaster Recovery and Crisis
Management
2
Elements of business continuity management
3
Short term and long term Strategies of BC
Business continuity best practices, standards,
and guidelines
4
Example of Business Continuity Outline
5
Stages of BCP life-cycle and their deliverables
6
7
FFIEC Business Continuity Guidelines
4
Main Menu
1
Business Continuity, Disaster Recovery and Crisis
Management
2
Elements of business continuity management
3
Short term and long term Strategies of BC
Business continuity best practices, standards,
and guidelines
4
Example of Business Continuity Outline
5
Stages of BCP life-cycle and their deliverables
6
7
FFIEC Business Continuity Guidelines
5
Do You Know
Do you know the difference between

Business Continuity
Disaster Recovery
Crisis Management
6

7
(No Transcript)
8
Do you know the difference between Plans?
Business Continuity
Disaster Recovery
Crisis Management


Resuming service delivery


Duplicating computer operations after a
catastrophe occurs
Evacuating staff and visitors
9
(No Transcript)
10
How did 9/11 Plans Work?
Business Continuity
Disaster Recovery
Crisis Management

• Company inside WTC Loss of paper files
• Company near WTC
• Damages - Toll on the staff

• Service providers for disaster recovery sites
• Duration of expected recovery time

• PACE University evacuating staff still left
  human psychological damages

11
Main Menu
1
Business Continuity, Disaster Recovery and Crisis
Management
2
Elements Of Business Continuity Management
3
Short term and long term Strategies of Business
Continuity
Business continuity best practices, standards,
and guidelines
4
Example of Business Continuity Outline
5
Stages of BCP life-cycle and their deliverables
6
7
FFIEC Business Continuity Guidelines
12
Whats at stake
Information
Communications Equipment
People
Your organization Your reputation
IS/IT
Facilities Infrastructure
Processes Capabilities
13
Information

• Some day on the corporate balance sheet, there
  will be an entry which reads information, for in
  most cases the information is more valuable than
  the hardware which possess it.
  
• Admiral Grace Murray Hopper, United States Navy.

Photo Source http//www.cacr.math.uwaterloo.ca/co
nferencesl
14
2
Implement the Business Continuity Management in a
Corporate
15
2
Elements Of Corporate Business Continuity
Management
Corporate Business Continuity
7

Business Continuity Management
Business Continuity Management
16

Risk Management Identifying and Preventing The
Causes before they happen
Business Continuity Dealing with the
Consequences after they happen
Thailand Tsunami
Quiet bungalows on 25 Dec 2004 at 225pm
Same view on 1 Jan 2005 at 125pm 
17
2
Elements Of Corporate Business Continuity
Management
Corporate Business Continuity
7

Enterprise Risk Management Review Assessment -
Strategies
Enterprise Risk Management Risk Assessment
Risk Strategy Risk Appetite
Crisis Management Escalation Follow up
Business Continuity Management Update BCP
Test BCP
Business Continuity Management BIA BCP Test
BCP
18
Risk vs. Continuity
Table Comparison on Risk Management and Business
Continuity Management (Source The Business
Continuity Institute, (2005), Good Practice
Guidelines A Framework for Business Continuity
Management, UK).
19
Main Menu
1
Business Continuity, Disaster Recovery and Crisis
Management
2
Elements of business continuity management
3
Short term and long term Strategies of Business
Continuity
Business continuity best practices, standards,
and guidelines
4
Example of Business Continuity Outline
5
Stages of BCP life-cycle and their deliverables
6
7
FFIEC Business Continuity Guidelines
20
3
Elements Of Business Continuity Management
BCM Short Term Strategy BCM Project for Startup
21
Business Continuity Management Long Term Strategy
Set and Manage
Strategy
Policy and Governance
Think and Analyze
Business Impact Analysis (BIA)
Risk Assessment
Write and Maintain
Run and Test
Scheduled Exercises
Crisis Management (CM)
Maintenance
Disaster Recovery (DR)
Audit

Work area Recovery (WR)
Reporting
22
Main Menu
1
Business Continuity, Disaster Recovery and Crisis
Management
2
Elements of business continuity management
3
Short term and long term Strategies of Business
Continuity
Business continuity best practices, standards,
and guidelines
4
Example of Business Continuity Outline
5
Stages of BCP life-cycle and their deliverables
6
7
FFIEC Business Continuity Guidelines
23


24
4
Business continuity best practices, standards,
and guidelines

• BS 25999-12006 Country United Kingdom
• NFPA 1600 Country United States
• CSA Z1600 Country Canada
• HB 2212004 Country Australia
• HB 292-2006 Country Australia
• BS25777 Country United Kingdom
• BS ISO/IEC 177992005 Country United Kingdom

M
25
Main Menu
1
Business Continuity, Disaster Recovery and Crisis
Management
2
Elements of business continuity management
3
Short term and long term Strategies of Business
Continuity
Business continuity best practices, standards,
and guidelines
4
Example of Business Continuity Outline
5
Stages of BCP life-cycle and their deliverables
6
7
FFIEC Business Continuity Guidelines
26

Business Continuity Plan Outline Example

• TABLE OF CONTENTS
• 1. BUSINESS FUNCTION DETAILS
• 2. WORKAREA IMPACT
• 2.1 Staff Impact
• 2.2 Financial Operational Impact
• 2.3 Other Factors
• 3. TECHNICAL SERVICE IMPACT
• 3.1 Technical Impact
• Dependencies
• Applications Needed
• Standard Workstations Needed
• Vital Records Electronic
• Vital Records Paper
• Significant Information

27

Business Continuity Plan Outline Example
Operational Impact


28
Main Menu
1
Business Continuity, Disaster Recovery and Crisis
Management
2
Elements Of Business Continuity Management
3
Short term and long term Strategies of Business
Continuity
Business continuity best practices, standards,
and guidelines
4
Example of Business Continuity Outline
5
Stages of BCP life-cycle and their deliverables
6
7
FFIEC Business Continuity Guidelines
29
6
Stages Of BCP Life-cycle And Their Deliverables

• Launch BCP Project

• Review Mission and Business Functions

• Conduct a Business Impact Analysis

• Develop Needed Policies, Procedures and Protocols

• Create a Written BCP

• Test and Maintain Your BCP

• Inspire a Continuity Culture

30

• Launch BCP Project

• Board and Executive Management Team
• Project Team
• Employees

31
2. Review Mission and Business Functions

• Mission-Critical Services
• Maximum Acceptable Downtime
• Source of Interruption
• Service Delivery

M
32

3. Conduct a Business Impact Analysis

• Purpose of BIA
• Effects on business function
• Criticality of business function

M
33
4. Develop Needed Policies, Procedures and
Protocols

• What should be included
• Document
• Stakeholders

M
34
5. Create a Written BCP

• Table of Contents
• Distribution strategy

M
35
6. Test and Maintain Your BCP

• Realistic Conditions Approach
• Tabletop Exercise
• Simulated Event Exercise
• Debriefing Participants
• Plan Maintenance

M
36
7. Inspire a Continuity Culture

• Employee training
• Regular Testing
• Periodic evaluation of BCP

M
37
Main Menu
1
Business Continuity, Disaster Recovery and Crisis
Management
2
Elements Of Business Continuity Management
3
Short term and long term Strategies of Business
Continuity
Business continuity best practices, standards,
and guidelines
4
Example of Business Continuity Outline
5
Stages of BCP life-cycle and their deliverables
6
7
FFIEC Business Continuity Guidelines
38
(No Transcript)
39
(No Transcript)
40
W.H.O Influenza A(H1N1) Update
26 June 2009 0700 GMT
41

7
Federal Financial Institutions Examination
Council (FFIEC) Business Continuity Guidelines
Differences between Traditional BCP and
Pandemic Planning

• A preventive program
• 2. A documented strategy
• 3. A comprehensive framework
• 4. A testing program
• 5. An oversight program

M
42
THANK YOU