business continuity basics
DESCRIPTION
Business Continuity Basics. David Tickner MBCI. Business Continuity Planning. What is it? Why is it so important? What part can you play? What’s in it for you?. What is BCP?. - PowerPoint PPT PresentationTRANSCRIPT
Business Continuity Basics
David Tickner MBCI
2
Business Continuity Planning
• What is it?
• Why is it so important?
• What part can you play?
• What’s in it for you?
3
What is BCP?• the processes by which business can be maintained to
an acceptable level until full processes and systems are restored
• the plans and supporting procedures that guide the continuity or timely recovery of business operations following an unplanned interruption to business operations over an extended period
• BCP is about minimizing the impacts of critical events on an organisation and its stakeholders [internal and external]
Business Continuity in context
Disaster Recovery - the creation & execution of plans to recover the data & systems of an organisation to the point immediately prior to the interruption
Contingency - the physical or process alternative to a single point of failure eg. Back up generator for power failures
Operational Continuity - the alternative processes implemented during a failure, which allow the “process” to continue, whilst relying on the contingencies or DR Plans to restore full operations
Business Continuity - the processes by which business can be maintained to an acceptable level until full processes and systems are restored
Where does BCP Fit In
MYTHS & ASSUMPTIONS
• If you have an IT DR Plan you don’t need BC Planning
• Contingency planning and risk management cover BCP
• We’ve already got Evac. Plans
• We’re well insured against losses
• We’ve been OK until now and survived a few problems – we’ll be OK!
• BCP is a minimalist approach
BCP
BR
Risk Management
Crisis Management
Emergency Management
IT/DRP
A Key Component of Compliance & Business Resilience
6
Goals of BC Planning
• To identify the organisation’s key processes • To identify the critical underlying technology &
services • To identify the critical stakeholder relationships • To identify the alternative approaches • To establish a plan[s] that can be readily and
effectively activated • To provide real operational alternatives
In the event of…….The nature of the major impact incidents would be those that result in:
– Extended loss of, unavailability of or denial of access to the organisation’s major location at .....................................;
– Extended loss of, or unavailability of key personnel required to deliver the key functions;
– Extended and significant interruption to critical supply chain goods and services;
– Extended loss or unavailability of critical infrastructure necessary for the operation of the organisation or the delivery of its services;
– Extended loss of or unavailability of key information/vital documents, including electronic data & systems,
Or the combination of or consequential impacts of any of the above impacts.
8
Why is BCP so important?
• Recent international and business crisis events– September 11 - Hurricane Katrina– Asian Tsunami - Christchurch ‘quakes– BP Oil Rig blow-out - Carbon Tax
• Corporate governance/compliance– Sarbanes-Oxley, APRA, ASIC/ASX, because of failures like
• HIH Insurance, Enron
• Protecting assets, employees and stakeholders– The influenza pandemics
• Government - for the public good– New fire warning and evacuation regulations– Public transport, public safety
The Basic BC Planning Model
9
Your OrganisationS
S
S
C
C
C
Supplier’sSupplier(s) Supplier Customer Customer’s
Customer(s)
A
A
B
B
Potential impacts on you Potential impacts you could create
Identifying Key Stakeholders
MAORTO
Recovery Actions – too soon? Or too late?
COST/IMPACT
TIME
Recovery solution
Impact without action
RPOShort RPO Long RPO
Realistic- Optimal time, cost & Impact
Unrealistic- Impact & Time
Unrealistic- Cost
A Simple BCP
Everyone has done BC Planning before.
Just take a holiday…..seriously
The Safeway Warehouse FireA perfect scenario…..
13
In review
What went right?
What went wrong?
15
The Real Benefits of BCP• Maintaining a viable ongoing business• Continuity of key services• Reduces and manages uncertainty• An aid to meeting legal and moral commitments• Protection of:– Staff & staff confidence– Assets– Reputation– Economic position
• A firm level of security for both suppliers and customers
Establishing a lasting & effective culture
Business Continuity Essentials:
–Corporate Commitment
–Staff understanding & training
–Stakeholder engagement
–Planning & testing
–Continuing Review and Revision
Your Presenter
David Tickner MBCI
Consulting Principal – Computrix Services P/L