What Does PL 11053 Mean for SMBs

1
What Does PL 110-53 Mean for SMBs?

• Diana McClure, Business Resiliency Program
  Manager, IBHS
• Don Byrne, CBCP, Managing Director of North River
  Solutions
• Mark Penske, Chairman, CEO of United Advisors

2
PL 110-53/Title IX
3
Topics

• Small business preparedness and PL 110-53/Title
  IX
• The challenges
• Risks to be considered
• Risk management options for small organizations
  vs. large companies
• Business Impact Analysis for small business
• Small business, current international standards
  and certified audits
• Possibility of a new small business standard for
  business continuity management?

4
Business Resilience

• Resilience
• Ability of an organization to resist being
  affected by an incident
• Acceptable level of operation
• Acceptable time frame
• (BCM Part1 Code of Practice, BS
  25999-12006)
• Interest in business resilience
• IBHS/North River Solutions/United Atlantic Capital

5
Ten Areas of Commonality
6
Five Level Maturity Model
7
Three Tracks
8
Identification of Risks

• What risks should be considered when developing a
  business continuity plan?
• Weather Related Hazards
• Disease Related Hazards
• Human Caused Accidents
• Other Natural Hazards
• Human Intentional Hazards
• Technology Production Hazards
• Other Risks

9
(No Transcript)
10
Four Approaches to Managing RiskRisk Appetite
11
Common Types of Disruption

• Loss of
• key personnel or general staff
• access to all or part of the normal worksite
• all or some production infrastructure
• All or part of the technical infrastructure.
• Interruption of
• products and services provided by vendors or
  suppliers
• Impact from
• a change in organization or business structure
• a change in budget or from a financial loss
• regulatory or legal issues

12
Risk Management Options

• Are the same risk management options available to
  small organizations that large companies use?
  For example
• Loss of staff Tele-work plan
• Loss of access Have alternate site available
• Loss of production infrastructure Mutual aid
  agreement
• Loss of technical infrastructure Virtualization
  or relocate to hot spot
• Interruption in supply chain Use standard
  products
• Change in organization Document all processes
  cross training
• Financial loss Credit line available
• Legal/regulatory issue Well-maintained
  indexed E-records

13
Business Impact Analysis

• How do small business BIAs differ from those of
  larger, multi-site organizations?
• Impacts
• Financial
• Reputational
• Customer Service
• Quality
• Employee Morale
• Regulatory

14
Open for Business Advanced
15
Audits
16
Small Business Standard forBusiness Continuity
Management

• Is there an opportunity to develop a new small
  business standard for business continuity
  management?
• When/Why
• How
• What comes next?

17
Questions and Thank You

• Diana McClure, Business Resiliency Program
  Manager, IBHS
• Don Byrne, CBCP, Managing Director of North River
  Solutions
• Mark Penske, Chairman, CEO of United Advisors