Department of Revenue

BCP Development Path:

Tips and Hints

Methodologies used in Creating Revenue’s BCP

ISDInstructional

Design

Project Management Fundamentals

7 Habits by Steven Covey

Revenue’s Combined approach

Revenue’s Combined approach

Quick Review

A sequential project management planning approach

1. Define the objectives

2. Define the parameters

3. Develop the data collection “tool”

4. Collect the data

5. Compile the data

6. Verify the data

Quick Review

Training course ware development

1. Begin with the “Test”

2. Design the BC plan in reverse direction

3. Write the BC plan in the forward direction

Quick Review

Steven Covey’s 7 Habits for Highly Successful People:Which became “Bill’s short list”

1. Begin with the end in mind (2)

2. Put first things first (3)

3. Seek first to understand (5)

4. Collaborative problem solving, effective team work, shared ownership (6)

Establish a Format

• Criteria

• Fits into existing emergency and evacuation plans

• Critical business functions

Establish a Format

• Criteria:– Needs to be easily understood

– Needs to “read like a script”

– Check lists or instructions to be followed

Establish a FormatSee supplemental packet, page #

• Criteria:– Needs to be easily understood (pages 1-4)

– Needs to “read like a script” (pages 5-6)

– Check lists or instructions to be followed (pages 7-13)

– Forms, special documents should be included (pages 14-17)

– Definitions, assumptions, additional support information (pages 18-29)

Establish a Format

• Fits into existing emergency and evacuation plans

– BCP isn’t always the “first and primary course of action”

– Establish decision making body and incident command center (EOC)

Incident Time Line from Evacuation to Disaster Recovery

Time

Eve

nt

Safety & Security Committee

Incident /Evacuation 96 hrs48 hrs24 hrs

Recovery and Employee Support Teams (REST)

Crisis Communication Team (CCT)

Management Team (MT)

1 hr

Recovery Team· Banking - EFT

Recovery Team· Funds Distribution

Recovery Team· Banking - Track· Mail Opening

CCT has up to 24 hours to assess severity

before passing decision to EMT for plan

activation

Phase I Phase II Phase III

30 days

Both the MT and the REST teams make up the Incident Management Team (IMT)

EvacuationAccount for personnel

InfrastructureIncident Management Team (IMT)

Function RecoveryMission Critical Business Functions (MCBF’s)

BCP Timeline if implemented

BCP_Conceptual _Processflow_5.5.vsd

Incident

Safety / Evacuation Team

Crisis Communications

Team

Criteria to decide whether to implement BCP

Management Team (MT)

Recovery and Employee Support Teams

(REST)

Phas

e I

Phas

e II

Communications

Team

Information

Services Team

Finance /

Facilities Team

HR /

Benefits Team

Phas

e III

Banking EFT

Funds Distribution

Mail Opening

Banking Remittance

Return Processing

Payment Collection

Utility Valuation

Industrial Valuation

Assessment & Taxation Oversight

Return Audit

Filing Enforcement

1

2

3

4

Business Continuity Plan Overview

Supp

ort

Fun

ctio

ns P

hase

E

vacu

atio

n P

hase

Bus

ines

s F

unct

ion

Rec

over

y

5

6

7

8

9

10

11

Incident Management Team

REST MT

IMT

(Inc

iden

t Man

agem

ent T

eam

)

Sequential Phases:An emergency or incident is declared

BCP_Conceptual _Processflow_5.5.vsd

Incident

Safety / Evacuation Team

Crisis Communications

Team

Criteria to decide whether to implement BCP

Management Team (MT)

Recovery and Employee Support Teams

(REST)

Phase

I

Phase

II

Communications

Team

Information

Services Team

Finance /

Facilities Team

HR /

Benefits Team

Phase

III

Banking EFT

Funds Distribution

Mail Opening

Banking Remittance

Return Processing

Payment Collection

Utility Valuation

Industrial Valuation

Assessment & Taxation Oversight

Return Audit

Filing Enforcement

1

2

3

4

Business Continuity Plan Overview

Su

pp

ort Fu

ncti

on

s Ph

ase

Evacu

ati

on

P

hase

Bu

siness

Fu

ncti

on

Rec

ov

ery

5

6

7

8

9

10

11

Incident Management Team

REST MT

IMT

(Incid

ent M

anag

emen

t Tea

m)

Sequential Phases:Once decision is made to implement BCP

BCP_Conceptual _Processflow_5.5.vsd

Incident

Safety / Evacuation Team

Crisis Communications

Team

Criteria to decide whether to implement BCP

Management Team (MT)

Recovery and Employee Support Teams

(REST)

Phase

I

Phase

II

Communications

Team

Information

Services Team

Finance /

Facilities Team

HR /

Benefits Team

Phase

III

Banking EFT

Funds Distribution

Mail Opening

Banking Remittance

Return Processing

Payment Collection

Utility Valuation

Industrial Valuation

Assessment & Taxation Oversight

Return Audit

Filing Enforcement

1

2

3

4

Business Continuity Plan Overview

Su

pp

ort Fu

ncti

on

s Ph

ase

Evacu

ati

on

P

hase

Bu

siness

Fu

ncti

on

Rec

ov

ery

5

6

7

8

9

10

11

Incident Management Team

REST MT

IMT

(Incid

ent M

anag

emen

t Tea

m)

Sequential Phases:BCP is now functional

Establish a FormatSee supplemental packet, page #

• Critical Business Functions (CBF’s)– CBF (phase III) implementation information (pages 1-7)

– Description or why (page 8-9)

– Who is involved and when (page 10)

– What to do and when (page 11-12)

– Where this will be done (page 13)

– With what hardware/software/forms, or other means (page 14-15)

• In this case, the CBF is divided into a 1-3 day RTO and a 5-30 day RTO

• The sequence is repeated for each CBF

Testing vs Exercises

Expectations:

Testing• From a Technical Review to Table Top Testing result should

be to find the missing elements, mistakes, or errors.

• “Testing is designed to fail”Exercises

• From small scale to a full scale exercises, results should be positive and successful.

• “Exercises are designed to be successful”

See page Testing_Elements_1.doc for model