Business Continuity Planning

transcript

Mistake-proofing our business Minimize disruption

◦ processes◦ customers

Incorporates existing plans Becomes an ongoing part of doing

business.

Some companies never recover – easier to take the insurance money.

A disaster can financially turn a good year into a bad year.

Initial actions during the first few hours can save a lot of money.

You use continuity practices daily, make it a plan!

Disaster Recovery Planning◦Rebuilding what was destroyed

Business Recovery Planning◦Addresses customers and suppliers

Business Continuity Planning◦Also includes business mitigation to reduce the impact and keep the business running.

Identify critical business functions. Conduct a risk analysis of threats, likelihood

of occurrence and impact for each critical function.

Identify mitigation actions to reduce likelihood or impact of a threat.

Write recovery plan for major disaster.

1. Natural Threats2. Infrastructure (electrical, telephone, water,

climate control)

3. Data Processing4. By Departments5. Individual

Company Organization Chart Employee recall telephone numbers

(verified) Key Control Program Service Contract List Vendor List Walk-around asset inventory Software Inventory

Document critical business functions Identify operations restoration priorities Map toxic material locations Employee skills matrix

Plan Administrator (Disaster Master)◦ Assembles interim plan◦ Ensures plan is kept up to date.◦ Schedules testing◦ Works with insurance company

Plan Administrative Assistant◦ Copy control◦ Keeps recall information current◦ Substitutes for the Administrator

Containment Manager◦ Lives close by◦ Good judgment, makes on the spot decisions◦ Can spend for containment as needed.◦ Focuses on stopping the damage from

spreading. Sponsor

◦ Ensures departments completes their plans◦ Observes testing◦ Sets key criteria◦ Appoints the others

Only deals with critical functions. Starts with the primary plan

◦ Common solutions to many problems Appendices for specific actions Immediate action steps Audience

◦ Who is going to execute it?◦ How long must they hold out?

Each department assigns a representative

General knowledge of processes Available to work on the project Good communicator Can dig out answers Work with manager to identify critical

processes

Meet weekly until project is finished Conduct Risk Assessment Mitigation investigation recommendations Write plans Desk check with manager Small test for sub-plans Large test with department

Testing validates the plan and trains the people.

Day to day emergencies can sometimes do this.

Projects can be worked into plan testing.