department of revenue bcp development path: tips and hints
TRANSCRIPT
Department of Revenue
BCP Development Path:
Tips and Hints
Methodologies used in Creating Revenue’s BCP
ISDInstructional
Design
Project Management Fundamentals
7 Habits by Steven Covey
Revenue’s Combined approach
Revenue’s Combined approach
Quick Review
A sequential project management planning approach
1. Define the objectives
2. Define the parameters
3. Develop the data collection “tool”
4. Collect the data
5. Compile the data
6. Verify the data
Quick Review
Training course ware development
1. Begin with the “Test”
2. Design the BC plan in reverse direction
3. Write the BC plan in the forward direction
Quick Review
Steven Covey’s 7 Habits for Highly Successful People:Which became “Bill’s short list”
1. Begin with the end in mind (2)
2. Put first things first (3)
3. Seek first to understand (5)
4. Collaborative problem solving, effective team work, shared ownership (6)
Establish a Format
• Criteria
• Fits into existing emergency and evacuation plans
• Critical business functions
Establish a Format
• Criteria:– Needs to be easily understood
– Needs to “read like a script”
– Check lists or instructions to be followed
Establish a FormatSee supplemental packet, page #
• Criteria:– Needs to be easily understood (pages 1-4)
– Needs to “read like a script” (pages 5-6)
– Check lists or instructions to be followed (pages 7-13)
– Forms, special documents should be included (pages 14-17)
– Definitions, assumptions, additional support information (pages 18-29)
Establish a Format
• Fits into existing emergency and evacuation plans
– BCP isn’t always the “first and primary course of action”
– Establish decision making body and incident command center (EOC)
Incident Time Line from Evacuation to Disaster Recovery
Time
Eve
nt
Safety & Security Committee
Incident /Evacuation 96 hrs48 hrs24 hrs
Recovery and Employee Support Teams (REST)
Crisis Communication Team (CCT)
Management Team (MT)
1 hr
Recovery Team· Banking - EFT
Recovery Team· Funds Distribution
Recovery Team· Banking - Track· Mail Opening
CCT has up to 24 hours to assess severity
before passing decision to EMT for plan
activation
Phase I Phase II Phase III
30 days
Both the MT and the REST teams make up the Incident Management Team (IMT)
EvacuationAccount for personnel
InfrastructureIncident Management Team (IMT)
Function RecoveryMission Critical Business Functions (MCBF’s)
BCP Timeline if implemented
BCP_Conceptual _Processflow_5.5.vsd
Incident
Safety / Evacuation Team
Crisis Communications
Team
Criteria to decide whether to implement BCP
Management Team (MT)
Recovery and Employee Support Teams
(REST)
Phas
e I
Phas
e II
Communications
Team
Information
Services Team
Finance /
Facilities Team
HR /
Benefits Team
Phas
e III
Banking EFT
Funds Distribution
Mail Opening
Banking Remittance
Return Processing
Payment Collection
Utility Valuation
Industrial Valuation
Assessment & Taxation Oversight
Return Audit
Filing Enforcement
1
2
3
4
Business Continuity Plan Overview
Supp
ort
Fun
ctio
ns P
hase
E
vacu
atio
n P
hase
Bus
ines
s F
unct
ion
Rec
over
y
5
6
7
8
9
10
11
Incident Management Team
REST MT
IMT
(Inc
iden
t Man
agem
ent T
eam
)
Sequential Phases:An emergency or incident is declared
BCP_Conceptual _Processflow_5.5.vsd
Incident
Safety / Evacuation Team
Crisis Communications
Team
Criteria to decide whether to implement BCP
Management Team (MT)
Recovery and Employee Support Teams
(REST)
Phase
I
Phase
II
Communications
Team
Information
Services Team
Finance /
Facilities Team
HR /
Benefits Team
Phase
III
Banking EFT
Funds Distribution
Mail Opening
Banking Remittance
Return Processing
Payment Collection
Utility Valuation
Industrial Valuation
Assessment & Taxation Oversight
Return Audit
Filing Enforcement
1
2
3
4
Business Continuity Plan Overview
Su
pp
ort Fu
ncti
on
s Ph
ase
Evacu
ati
on
P
hase
Bu
siness
Fu
ncti
on
Rec
ov
ery
5
6
7
8
9
10
11
Incident Management Team
REST MT
IMT
(Incid
ent M
anag
emen
t Tea
m)
Sequential Phases:Once decision is made to implement BCP
BCP_Conceptual _Processflow_5.5.vsd
Incident
Safety / Evacuation Team
Crisis Communications
Team
Criteria to decide whether to implement BCP
Management Team (MT)
Recovery and Employee Support Teams
(REST)
Phase
I
Phase
II
Communications
Team
Information
Services Team
Finance /
Facilities Team
HR /
Benefits Team
Phase
III
Banking EFT
Funds Distribution
Mail Opening
Banking Remittance
Return Processing
Payment Collection
Utility Valuation
Industrial Valuation
Assessment & Taxation Oversight
Return Audit
Filing Enforcement
1
2
3
4
Business Continuity Plan Overview
Su
pp
ort Fu
ncti
on
s Ph
ase
Evacu
ati
on
P
hase
Bu
siness
Fu
ncti
on
Rec
ov
ery
5
6
7
8
9
10
11
Incident Management Team
REST MT
IMT
(Incid
ent M
anag
emen
t Tea
m)
Sequential Phases:BCP is now functional
Establish a FormatSee supplemental packet, page #
• Critical Business Functions (CBF’s)– CBF (phase III) implementation information (pages 1-7)
– Description or why (page 8-9)
– Who is involved and when (page 10)
– What to do and when (page 11-12)
– Where this will be done (page 13)
– With what hardware/software/forms, or other means (page 14-15)
• In this case, the CBF is divided into a 1-3 day RTO and a 5-30 day RTO
• The sequence is repeated for each CBF
Testing vs Exercises
Expectations:
Testing• From a Technical Review to Table Top Testing result should
be to find the missing elements, mistakes, or errors.
• “Testing is designed to fail”Exercises
• From small scale to a full scale exercises, results should be positive and successful.
• “Exercises are designed to be successful”
See page Testing_Elements_1.doc for model