making business continuity child’s play solutions ltd business continuity management contact...
TRANSCRIPT
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Business Continuity Management
Contact details: Contact : Mick O’Regan Mobile : 087-2897687 Email : [email protected] Web : www.abcsolutions.ie Absolute Business Continuity Solutions Ltd.
Presentation
February 2008
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Presentation Overview
Why Continuity Planning is important
BS25999 framework
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Why BCP is important
If potential risk occurs Business Continuity could be threatened
By systematically reviewing the risks you can reduce the risk of an incident occurring limit the impact if the worst comes to pass
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Other Incidents
High profile incidents Sept. ’07 - Protim Little Island Fire Aug. ‘07 - Glanbia Meats Edenderry Aug. ‘07 - Web sites hacked Feb. ‘07 - HSE HQ Cork Dennehys Cross Jan. ’06 - C&D Pet Foods Dec. ‘05 - Hemel Hempstead Sept. ’03 - Sunbeam
Incidents not publicised Jan. ’07 - Cork Airport Business Park evacuated due to
GAS leak Jan. ’07 - BofI Cabinteely Power outage
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
What is Business Continuity Management (BCM)? BCM is about ensuring that your Business prepares a
plan to handle a serious incident. During this process you can identify ways to reduce the risk of an incident happening and minimise the impact if it does happen.
If an incident occurs key staff should be trained to handle the situation through testing and exercising which will enable your business to continue to function to the agreed level with the least disruption possible.
Making Business Continuity Child’s Play
Solutions Ltd
Task Name
Incident
Executive
BusinessRecovery
Team
Incident/Emergency Response
Team
DepartmentalRecovery
Teams
Planning 0 - 1 Hour 1 hour - 2 days > 2 days
Committment
Life Cycle of an Incident
Emergency ResponseActions
(Building Evacuation etc)
Incident ManagementActions
RecoveryActions
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Key output from BCM process
Define the : Recovery Point Objectives (RPO) – to what point in time you need to recover the MCA
Recovery Time Objectives (RTO) – how quickly you need to recover the MCA
• Identify Mission Critical Activities (MCA)
• Identify key Inputs\Outputs
Key Suppliers ; Documents• Identify Maximum Tolerable Outage (MTO)
and Minimum Essential Service (MES)
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
BCM process overview
Risk Analysis
Threat => Probability & Impact
ID Controls – in place; required
(Reduce risk to acceptable level)Backup & Recovery
Strategy
Incident
ID Recovery teams• Emergency• Disaster Recovery• Business recovery
Recovery Activities
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
BCM – Recovery strategy
Depends on type of incident being covered Loss of Primary office – alternative work area
and/or use other alternative office Sensitive information disclosed – policy &
procedures to avoid; handle PR via Incident Management
Loss of key individuals – cross-train
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Drivers for Business Continuity ManagementKey Stakeholders Customers Regulator – Law Society Staff Board of Directors Insurance Company (Highly Protected Risk status!) Supply Chain Protection of the Organisation’s Reputation Others?
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
BS25999 BCM Framework
BCMProgramme
Management
Developing and
implementing
a BCM Response
Determining
BCM options
Exercising, maintenance auditing and
self-assessment
Understandingthe organization
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
2. Business Continuity Strategy
Do nothing Insurance Prevention Mirror sites Gentlemen's agreement Work area recovery – hot-site
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
3. Develop and Implement Business Continuity Response
The BCP plan
Includes Incident (Crisis) Management IT DR plan Business Unit plan
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
4. Building & Embedding a Continuity Culture Awareness program
Education
BCM Training
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
5. Testing, Maintenance and Audit
Testing (Exercising) strategies• Call out test • Desk-top exercise • IT team recover systems • Business Users simulate work process
Maintain the plan • Quarterly reviews• After major change
Audit• Independent review – BCM framework and plans
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
6. BCM Programme Management
Roles and responsibilities Identify key individuals
BC policy
Cross-check Business Unit decisions and deal with cross- business conflicts
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Failing to Plan
is
Planning to Fail
Making Business Continuity Child’s PlayMaking Business Continuity Child’s Play
Solutions Ltd
Absolute Business Continuity Solutions
Services on offer Plan development Explore continuity strategies Document BCP/DR/Incident Management Plans Implement staff awareness & training Test, Maintain and Review plans
Absolute Business Continuity Solutions are available to help you with all elements of the BCM process
QUESTIONS?Contact Details Contact : Mick O’Regan Mobile : 087-2897687 Email : [email protected] Web : www.abcsolutions.ie Absolute Business Continuity Solutions Ltd.