Simplified BCP methodology

www.continuityrecovery.com Copywrite: BC&RC 2009

1

Elements of Business Continuity

A high level methodology

Michael Wilkovesky

Business Continuity & Recovery Consulting

December 2009


2

Why plan? Nothing can go wrong, right?


3

Daily operations

A disaster - An unexpected event that cause a break in your businesses normal operation


4

BCP Planning Methodology

Analysis Phase

Strategy Phase

Planning Phase

Testing Phase

Maintenance Phase


5

Analysis Phase

This is the first phase of any Business Continuity Plan.

If you do not know what you are vulnerable to and what are critical activities to your business, how can you develop plans that are cost effective and will actually protect your business?

The parts of this phase are:

• Risk Analysis• Business Impact Analysis or Critical Activities Requirements• Technology Recovery Capabilities Assessment


6


Analysis Phase

Planning Phase

Testing Phase

Maintenance Phase

Strategy Phase


7

Strategy Phase

This phase of the program involves looking at the data from the Analysis Phase and determining what strategy or strategies will enable you to recover your business.

You need to look at the cost of each strategy to ensure that the strategy not only meets your needs but is also cost effective.

Types of recovery strategies to consider (this is not the complete list):

• Do nothing

• Hot site/cold site

• Build your own site


8


Analysis Phase

Strategy Phase

Testing Phase

Maintenance Phase

Planning Phase


9

Planning Phase

You know what you have to protect, you have your strategy selected, now you need to build your plans.

These plans are very detailed and include all of the necessary steps that you, your business groups or your technical staff need to recover your business.

Types of plans you will need to develop:

• Business unit/group plans

• Technology recovery plans

• Crisis Management Plans


10


Analysis Phase

Strategy Phase

Planning Phase

Maintenance Phase

Testing Phase


11

Testing Phase

Congratulations you have come a long way. You have analyzed your business, you have selected a recovery strategy and built your plans.

Your finished, right?

No. now you have to test your plans. An untested plan is nothing more than a nice binder sitting on a shelf. It may or may not protect your business.

Types of recovery tests:

• Active – for technology plans

• Passive/table top – for business and crisis plans


12


Analysis Phase

Strategy Phase

Planning Phase

Testing Phase

Maintenance Phase


13

Maintenance PhaseLike the Testing Phase, if you do not have a Maintenance Phase, your plans may become outdated very quickly.

You need to assign an owner of the plans and program and make sure that the person has senior management support.

Your maintenance schedule will depend on how dynamic your company is.

What to include (this is not the complete list:

• Changes to technology, staff, suppliers and customers

• New business activities added


14

Analysis Phase

Strategy Phase

Planning Phase

Testing Phase

Maintenance Phase

Now you can congratulate yourself. You have a tested well maintained plan. But you still have work to do.

Business Continuity is a program not a project. You will need to review the complete cycle every 1 to 2 years.


15

Disaster or disruption

BCP

Your company

Recovery plans do help your company to win


16

Michael Wilkovesky

Business Continuity & Recovery Consulting

Telephone: 1-416-318-6222

Email: [email protected]

Website: http://www.continuityrecovery.com

Blog: http://continuityrecovery.wordpress.com

Linked In: http://ca.linkedin.com/in/continuityrecovery

mailto:[email protected]

http://www.continuityrecovery.com/

http://continuityrecovery.wordpress.com/

http://ca.linkedin.com/in/continuityrecovery


17

Disasters can happen at anytime … is your company prepared?

Simplified BCP methodology

Business

Transcript of Simplified BCP methodology