Business Continuity Management
Presentation
February 2008
Contact details:
 Contact : Mick O’Regan
 Mobile : 087-2897687
 Email
: info@abcsolutions.ie
 Web
: www.abcsolutions.ie
 Absolute Business Continuity Solutions Ltd.
Solutions Ltd
Making Business Continuity Child’s Play
Presentation Overview
 Why Continuity Planning is important
 BS25999 framework
Solutions Ltd
Making Business Continuity Child’s Play
Why BCP is important
 If potential risk occurs Business Continuity
could be threatened
 By systematically reviewing the risks you
can


reduce the risk of an incident occurring
limit the impact if the worst comes to pass
Solutions Ltd
Making Business Continuity Child’s Play
Solutions Ltd
Making Business Continuity Child’s Play
Solutions Ltd
Making Business Continuity Child’s Play
Solutions Ltd
Making Business Continuity Child’s Play
Solutions Ltd
Making Business Continuity Child’s Play
Solutions Ltd
Making Business Continuity Child’s Play
Other Incidents
 High profile incidents
 Sept. ’07 - Protim Little Island Fire
 Aug. ‘07 - Glanbia Meats Edenderry
 Aug. ‘07 - Web sites hacked
 Feb. ‘07 - HSE HQ Cork Dennehys Cross
 Jan. ’06 - C&D Pet Foods
 Dec. ‘05 - Hemel Hempstead
 Sept. ’03 - Sunbeam
 Incidents not publicised
 Jan. ’07 - Cork Airport Business Park evacuated due to
GAS leak
 Jan. ’07 - BofI Cabinteely Power outage
Solutions Ltd
Making Business Continuity Child’s Play
What is Business Continuity
Management (BCM)?
 BCM is about ensuring that your Business prepares a
plan to handle a serious incident. During this process
you can identify ways to reduce the risk of an incident
happening and minimise the impact if it does happen.
 If an incident occurs key staff should be trained to
handle the situation through testing and exercising
which will enable your business to continue to
function to the agreed level with the least disruption
possible.
Solutions Ltd
Making Business Continuity Child’s Play
Life Cycle of an Incident
Task Name
Executive
Planning
0 - 1 Hour
1 hour - 2 days
> 2 days
Committment
Incident
Incident/
Emergency
Response
Team
Business
Recovery
Team
Departmental
Recovery
Teams
Emergency Response
Actions
(Building Evacuation etc)
Incident Management
Actions
Recovery
Actions
Solutions Ltd
Making Business Continuity Child’s Play
Key output from BCM process
•
•
•


Identify Mission Critical Activities (MCA)
Identify key Inputs\Outputs
Key Suppliers ; Documents
Identify Maximum Tolerable Outage (MTO)
and Minimum Essential Service (MES)
Define the :
Recovery Point Objectives (RPO) – to what point
in time you need to recover the MCA
Recovery Time Objectives (RTO) – how quickly
you need to recover the MCA
Solutions Ltd
Making Business Continuity Child’s Play
BCM process overview
Risk Analysis
Threat => Probability & Impact
ID Controls – in place; required
ID Recovery teams
• Emergency
• Disaster Recovery
• Business recovery
(Reduce risk to acceptable level)
Backup & Recovery
Strategy
Incident
Recovery Activities
Solutions Ltd
Making Business Continuity Child’s Play
BCM – Recovery strategy
 Depends on type of incident being covered



Loss of Primary office – alternative work area
and/or use other alternative office
Sensitive information disclosed – policy &
procedures to avoid; handle PR via Incident
Management
Loss of key individuals – cross-train
Solutions Ltd
Making Business Continuity Child’s Play
Drivers for Business Continuity
Management
Key Stakeholders
 Customers
 Regulator – Law Society
 Staff
 Board of Directors
 Insurance Company (Highly Protected Risk status!)
 Supply Chain
 Protection of the Organisation’s Reputation
 Others?
Solutions Ltd
Making Business Continuity Child’s Play
BS25999 BCM Framework
Understanding
the organization
BCM
Exercising,
maintenance Programme
auditing and Management
self-assessment
Determining
BCM
options
Developing
and
implementing
a BCM
Response
Solutions Ltd
Making Business Continuity Child’s Play
2. Business Continuity Strategy
 Do nothing
 Insurance
 Prevention
 Mirror sites
 Gentlemen's agreement
 Work area recovery – hot-site
Solutions Ltd
Making Business Continuity Child’s Play
3. Develop and Implement Business
Continuity Response
The BCP plan
Includes
 Incident (Crisis) Management
 IT DR plan
 Business Unit plan
Solutions Ltd
Making Business Continuity Child’s Play
4. Building & Embedding a Continuity
Culture
 Awareness program
 Education
 BCM Training
Solutions Ltd
Making Business Continuity Child’s Play
5. Testing, Maintenance and Audit
Testing (Exercising) strategies
• Call out test
• Desk-top exercise
• IT team recover systems
• Business Users simulate work process
Maintain the plan
• Quarterly reviews
• After major change
Audit
• Independent review – BCM framework and plans
Solutions Ltd
Making Business Continuity Child’s Play
6. BCM Programme Management
Roles and responsibilities
 Identify key individuals
 BC policy
 Cross-check Business Unit decisions and
deal with cross- business conflicts
Solutions Ltd
Making Business Continuity Child’s Play
Failing to Plan
is
Planning to Fail
Solutions Ltd
Making Business Continuity Child’s Play
Absolute Business Continuity Solutions
Services on offer





Plan development
Explore continuity strategies
Document BCP/DR/Incident Management Plans
Implement staff awareness & training
Test, Maintain and Review plans
 Absolute Business Continuity Solutions are available to
help you with all elements of the BCM process
QUESTIONS?
Contact Details
 Contact : Mick O’Regan
 Mobile : 087-2897687
 Email
: info@abcsolutions.ie
 Web
: www.abcsolutions.ie
 Absolute Business Continuity Solutions Ltd.
Solutions Ltd
Making Business Continuity Child’s Play