Business Continuity Basics
description
Transcript of Business Continuity Basics
Business Continuity Basics
David Tickner MBCI
2
Business Continuity Planning
• What is it?
• Why is it so important?
• What part can you play?
• What’s in it for you?
3
What is BCP?• the processes by which business can be maintained to
an acceptable level until full processes and systems are restored
• the plans and supporting procedures that guide the continuity or timely recovery of business operations following an unplanned interruption to business operations over an extended period
• BCP is about minimizing the impacts of critical events on an organisation and its stakeholders [internal and external]
Business Continuity in context
Disaster Recovery - the creation & execution of plans to recover the data & systems of an organisation to the point immediately prior to the interruption
Contingency - the physical or process alternative to a single point of failure eg. Back up generator for power failures
Operational Continuity - the alternative processes implemented during a failure, which allow the “process” to continue, whilst relying on the contingencies or DR Plans to restore full operations
Business Continuity - the processes by which business can be maintained to an acceptable level until full processes and systems are restored
Where does BCP Fit In
MYTHS & ASSUMPTIONS
• If you have an IT DR Plan you don’t need BC Planning
• Contingency planning and risk management cover BCP
• We’ve already got Evac. Plans
• We’re well insured against losses
• We’ve been OK until now and survived a few problems – we’ll be OK!
• BCP is a minimalist approach
BCP
BR
Risk Management
Crisis Management
Emergency Management
IT/DRP
A Key Component of Compliance & Business Resilience
6
Goals of BC Planning
• To identify the organisation’s key processes • To identify the critical underlying technology &
services • To identify the critical stakeholder relationships • To identify the alternative approaches • To establish a plan[s] that can be readily and
effectively activated • To provide real operational alternatives
In the event of…….The nature of the major impact incidents would be those that result in:
– Extended loss of, unavailability of or denial of access to the organisation’s major location at .....................................;
– Extended loss of, or unavailability of key personnel required to deliver the key functions;
– Extended and significant interruption to critical supply chain goods and services;
– Extended loss or unavailability of critical infrastructure necessary for the operation of the organisation or the delivery of its services;
– Extended loss of or unavailability of key information/vital documents, including electronic data & systems,
Or the combination of or consequential impacts of any of the above impacts.
8
Why is BCP so important?
• Recent international and business crisis events– September 11 - Hurricane Katrina– Asian Tsunami - Christchurch ‘quakes– BP Oil Rig blow-out - Carbon Tax
• Corporate governance/compliance– Sarbanes-Oxley, APRA, ASIC/ASX, because of failures like
• HIH Insurance, Enron
• Protecting assets, employees and stakeholders– The influenza pandemics
• Government - for the public good– New fire warning and evacuation regulations– Public transport, public safety
The Basic BC Planning Model
9
Your OrganisationS
S
S
C
C
C
Supplier’sSupplier(s) Supplier Customer Customer’s
Customer(s)
A
A
B
B
Potential impacts on you Potential impacts you could create
Identifying Key Stakeholders
MAORTO
Recovery Actions – too soon? Or too late?
COST/IMPACT
TIME
Recovery solution
Impact without action
RPOShort RPO Long RPO
Realistic- Optimal time, cost & Impact
Unrealistic- Impact & Time
Unrealistic- Cost
A Simple BCP
Everyone has done BC Planning before.
Just take a holiday…..seriously
The Safeway Warehouse FireA perfect scenario…..
13
In review
What went right?
What went wrong?
15
The Real Benefits of BCP• Maintaining a viable ongoing business• Continuity of key services• Reduces and manages uncertainty• An aid to meeting legal and moral commitments• Protection of:– Staff & staff confidence– Assets– Reputation– Economic position
• A firm level of security for both suppliers and customers
Establishing a lasting & effective culture
Business Continuity Essentials:
–Corporate Commitment
–Staff understanding & training
–Stakeholder engagement
–Planning & testing
–Continuing Review and Revision
Your Presenter
David Tickner MBCI
Consulting Principal – Computrix Services P/L