BUSINESS CONTINUITYPLANNING

What is a Disaster ?

Any unplanned event that requires immediate redeployment of limited resources

Natural & Man-made Disasters

Hurricane/Tornado

Earthquake

Bombing

Bio Hazards

Fires

Threats: Terrorist Attacks

Business Continuity Disruptive Events

Common Failure Areas

Different Types of Plans

Business Continuity (BC) Disaster Recovery (DR) Continuity of Operations

(COOP) Emergency Operations

(EOP) Crisis Management (CM) Incident Response (IR)

RespondResume

RecoverRestore

4 Rsof Contingency

Planning

Business Continuity Management means ensuring the continuity or uninterrupted provision of operations and services.  Business Continuity Management is an on-going process with several different but complementary elements. Planning for business continuity is a comprehensive process that includes disaster recovery, business recovery, business resumption, and contingency planning as shown below.

Business Continuity a Beginning without an End

BUSINESS CONTINUITY MANAGEMENT

DataRecovery

Plan

DataRecovery

Plan

ITRecovery

Plan

ITRecovery

Plan

BusinessUnit

RecoveryPlans

Emergency Operations Plan

Risk

Management

• Security• Insurance• Vital

Records• Business Impact Analysis

CrisisManagement

Plan

• Takeover• Product Contamination• Kidnap• Strike

BUSINESS CONTINUITY PLAN

Testing

BUSINESS CONTINUITY MANAGEMENT

Security Policy

Dr. Jim Kennedy – July 2006

Did You Know?

“If you can’t describe what you are doing as a process, you don’t know what you are doing.”

-W. Edwards Deming

Business Continuity Planning

Typical BCP Process

• Organization• Resources

BCPProject

Initiation

Develop BCP Policy & Scope

Conduct Business

Impact Analysis (BIA)

Identify Risks and their Mitigation

Develop Recovery Strategies

Develop & Test Plan

ManagementAwareness &

Training

BCPReview, Testing &

Verification

BCPMaintenance &

Change Management

Build smaller teams of Subject Matter Experts

Seek team cooperation and sharing w. each other and outside resources

Be brutally honest Do it in-house if you have time and

expertise, otherwise bring a BCP consultant

Simplify large/complex critical functions:

◦ People◦ Facilities◦ Technology◦ Miscellaneous

Critical Success Factors

“Expect the Worst and Don’t be Disappointed: Planning for Business Continuity & Disaster Recovery”