10 step rookie guide to bcm
TRANSCRIPT
sustainable planner
business continuity
professional consulting
presented by:
Virtual Corporation
The Rookie’s Guide to Business Continuity Management
Agenda
Step 1: Gain Executive Buy-in
Step 2: Create a BCP that suits your
company’s specific needs
Step 3: Consider BC program
management software
Step 4: Get a baseline of where your
organization is today.
Step 5: Create a BIA & eBIA
The Rookie’s Guide to Business
Continuity Management
Agenda
Step 6: Pilot your program before a full
enterprise launch
Step 7: Set a clear charter with a Steering
Committee
Step 8: Build team engagement
Step 9: Keep it consistent & holistic
Step 10: Be prepared for an ISO
certification audit
The Rookie’s Guide to Business
Continuity Management
Step 1:
Gain Executive Buy-in
What keeps your CEO up at night?
Quantify the financial impact with the
cost of a disruption.
Operational costs
Revenue lossReputational
loss
Facility
infrastructure loss
Data loss & recovery
Behavioral Changes
Secondary Impact
Mitigation Costs
Initial Impact
Total
Financial
Impact
Security
Modifications
Adverse Event
Step 2:
Create a business continuity
program (BCP) that suits your
company’s specific needs
Don’t fall into the trap of one size fits all.
“This is how we did it at my last company so let’s go!”
Critical considerations:
Program strategy
Program scope
Program support
Step 3:
Consider BC management software
Software is powerful, but it only works as well
as your overarching continuity
management plan & data.
The tool that fits today
needs to adapt with your
program as it grows.
Step 4:
Determine a baseline
3
Ensure that the organizational or business continuity management program effectiveness can be quantified21
Establish standard means of scoring BC program implementations
Why do you need a baseline?
Generate consistent data from which meaningful benchmark analyses can be drawn:
Develop historical databank tagged in meaningful ways, e.g., by industry, by region, by the organization’s size, etc.
Get a Baseline with the Business Continuity Maturity Model®
Step 5: Create a Business Impact Analysis (BIA) &
an Executive Business Impact Analysis
(eBIA)
This approach allows you
to obtain the most
accurate Recovery time
Objectives (RTOs) by
comparing &
compromising both
responses.
Step 6:
Pilot your program before a full
enterprise launch
Resist the temptation to simply
‘get ‘er done’. Leave that to the
‘Cable Guy’.
Even when challenged by executives to an
Arbitrary deadline, make time to pilot the
method, tools, and your support model.
Step 7:
Set a clear charter with a Steering Committee
Yes, getting meetings with
leadership is never easy.
Ensure that your executive
sponsor has “the juice” to
keep his/her peers
attention & enthusiasm.
Set a charter that keeps the importance on supporting your
continuity & resilience program.
Step 8:
Build team engagement
Empower your team by
spending time & energy in
reinforcing & supporting
planners instead of trying to
scare or manage them.
Step 9:
Keep it consistent & holistic
Don't let each site
(division or business unit)
stand up its own
program. There needs to
be consistency and
cohesiveness.
Step 10:
Be prepared for an ISO certification audit
Undertaking an ISO certification audit is
expensive both in terms of people’s time
and $$$.
Make sure that you are versed on your
corporate competencies such as:
1. Leadership
2. Employee awareness
3. BC program structure
4. Program pervasiveness
5. Metrics
6. Resource commitment
7. External
About Virtual Corporation
Our offerings include:
• Business impact analysis (BIA)
• Site vulnerability assessments
• Crisis management
• Incident command exercise
• Continuity program design &
implementation
• IT disaster recovery
• BCMM® assessments & training
• Resiliency facilitation & planning
Virtual Corporation is a leading implementer
of enterprise resiliency & continuity
programs.
www.virtual-corp.com