Business Continuity Management
|
|
- Arthur Snow
- 8 years ago
- Views:
Transcription
1 Business Continuity Management Version 1 approved by SMG December 2013 Business Continuity Policy Version 1 1 of 9
2 Business Continuity Management Summary description: This document provides the rationale for developing a business continuity culture. It details the University s aims and objectives in this regard and identifies the key roles and responsibilities. Scope: All staff on the Hull and Scarborough Campuses. With effect from: January 2014 Other related policies/documents: University Major Incident Plan, Campus Closure. Contact for further information: Grace Dalley Deputy Secretary g.dalley@hull.ac.uk Tel: This document is available in alternative formats from the Committee Section Approved by: Vice-Chancellor, University Registrar & Secretary, Senior Management Group. Next due for review: January 2017 Reference to any superseded policy/amalgamations: not applicable Relevant legal framework: Not applicable Equality Analysis: Not applicable Freedom of Information This policy is publicly available through the University's Publication Scheme under the Freedom of Information Act Other professional standards reference points: ISO 22301:2012, Business Continuity Instittue Good Practice Guide 2013 Business Continuity Policy Version 1 2 of 9
3 Business Continuity Management 1 BACKGROUND The Executive has identified the lack of a robust business continuity plan as a strategic risk for the University. In 2011 internal auditors identified gaps in the University s business continuity provision and external consultants Jermyn Consulting were engaged by the University in 2012 to complete a full review of business continuity and crisis management and report on its findings. The assignment involved a review of available documentation and structured discussions with representatives across the organisation. The University was benchmarked against the requirements of ISO 22301:2012 for planning, establishing, implementing, operating, monitoring, reviewing, maintaining and continually improving a business continuity management system. The findings of the review were disseminated and presented to the Executive and included a project plan and an indicative timeline for its implementation. 2 WHY DO WE NEED BUSINESS CONTINUITY MANAGEMENT? Business Continuity Management (BCM) is a process that enables the University to proactively identify and minimise the impact of risks that could affect its objectives, operations and infrastructure. BCM provides the capability for the University to ensure continuity of teaching and research, together with support for its students, staff, departments and faculties following any disruptive incident. Whilst the University does not have a statutory duty to undertake BCM, it is a business imperative; also the University has legal and moral responsibilities for staff, students and visitors and recognises the importance of this process in ensuring it can continue its critical activities after a disruption and to protect its reputation as a leading university in the UK. The Business Continuity process starts with Incident Management as illustrated below: The University has defined two types of incident: Business Continuity Policy Version 1 3 of 9
4 I. Minor incidents: are interruptions or disruptions that can be sufficiently disruptive to require the implementation of business continuity arrangements. They can be addressed by departmental business continuity plans. They are smaller scale events, affecting one or a small number of departments e.g. a localised computer virus, denial of access to a building, a minor power cut for a short period etc. However sometimes minor incidents can become major incidents. II. Major incidents: require the implementation of the University s Major Incident Plan, providing they meet the plan s criteria of causing serious harm to staff, students, the University community or property. This is a plan focused on more serious/larger scale events e.g. a national emergency, widespread media coverage of an incident, a power cut affecting the campus etc. Using the power cut example, the Major Incident Team (MIT) would focus on the urgent priorities i.e. the welfare of people and the safety / security of buildings. In addition, a business continuity response would be required in terms of how the University would continue its important functions. Separate documentation exists which details the arrangements for managing major incidents. Business Continuity Policy Version 1 4 of 9
5 3. AIMS AND OBJECTIVES BUSINESS CONTINUITY MANAGEMENT POLICY The BCM policy is focused on protecting and recovering the critical activities of the University. A critical activity is one that would impact on the reputation of the University or have a serious impact on its financial position or customers of the University if it was not performed or resumed within an appropriate defined period. This is likely to include some activities in the following areas: teaching (including assessment), research, services provided to students and Professional Services such as IT, HR and Estates. In the first instance business continuity plans will be developed which address the highest risk areas. Thereafter plans will be rolled out across all parts of the University and include activities that take place within Faculties, Departments, Schools, Institutes and Centres across the Hull and Scarborough Campuses. It will also include all areas of Professional Services. The University works with a number of partner institutions to deliver its services and a risk based approach will be adopted in terms of the University s expectations of these organisations having business continuity plans. The Business Continuity Management policy has the following key objectives: To raise the profile of BCM within the University of Hull. This will include ensuring that staff are aware of the plans, their roles in them and receive appropriate training To embed Business Continuity into the culture of the University so it becomes an integral part of decision making To ensure that critical activities across the University are identified and that suitable business continuity arrangements are in place or developed for them To establish appropriate structures to plan for and respond to incidents To ensure that BCM arrangements are ongoing and subject to regular reviews, audits and exercises To develop and review business continuity processes for continuous improvement, in accordance with best practice. 4. MANAGING BUSINESS CONTINUITY It is expected that over time all departments within the University will go through the Business Continuity management process. This will involve identifying critical business activities, the arrangements in place to continue to provide these activities in the event of a disruption as well as resource requirements. Individual Departments/Schools/Centres will be expected to nominate appropriate people (Business Continuity Coordinators) to co ordinate the development of their Department/Schools/Centre s Business Continuity arrangements. The Business Continuity Manager will provide support as required. Departments business continuity plans will be reviewed by the Business Continuity Coordinators at least annually, and will also be updated when there are significant changes to personnel, premises, suppliers etc Exercises to test a sample of the Business Continuity Plans will normally be held annually Training and awareness will be a key and ongoing part of Business Continuity Management. Business Continuity Policy Version 1 5 of 9
6 5. ROLES AND RESPONSIBILITIES University Business Continuity Lead (UBCL) The University Registrar and Secretary has been assigned as the lead for Business Continuity Management across the University. This involves: Assisting with raising the profile of Business Continuity at a strategic level Chairing the Business Continuity Steering Group Confirming to the Excutive and Council annually that, the University s business interruption risks are being appropriately and effectively managed. This will include a progress report on the development of Business Continuity Plans and the outcome of exercises to test the plans. University Business Continuity Manager The University Business Continuity Manager is responsible for overseeing the Business Continuity activities on behalf of the University. This involves: Raising the profile of Business Continuity across the University as an ongoing responsibility and ensuring that information is available to staff (with the aim of embedding BCM into the activities of the University) Providing advice and assistance throughout the BCM process Developing appropriate guidelines and templates for Faculties and Departments to detail their business continuity arrangements Assisting in the development of overarching plans and providing advice to BC Coordinators in the completion of their Department's Business Impact Analysis (BIA) and development of their Department business continuity plans Ensuring that the University s arrangements are regularly reviewed and tested Providing or commissioning training for appropriate staff and leading on the development of University exercises to review arrangements that have been put in place Business Continuity Steering Group As the senior decision making group, the Business Continuity Steering Group is responsible for: Ensuring there is a consistent approach to Business Continuity across the University Supporting and endorsing the BCM awareness raising regarding Business Continuity with the aim of embedding it into the culture of the University Monitoring the roll out of BCM across the organisation Reviewing the BCM policy to ensure it remains fit for purpose Business Continuity Champions (Faculty/ Professional Services Department level) The Business Continuity Champion (each Faculty has one and some of the departments in Professional Services) will be nominated by the Deans and relevant members of the Executive. The role of Business Continuity Champions is to: Act as a first point of contact for Faculty and Departmental business continuity queries Attend relevant training and awareness sessions to develop knowledge and understanding of Business Continuity Management Ensure that the Faculty /Departments are engaged in the process Business Continuity Policy Version 1 6 of 9
7 Complete Faculty Business Continuity plans Attend corporately run exercises and participate/lead in the running of exercises for the Faculty as appropriate Business Continuity Co ordinators (Department level) The Department Business Continuity Coordinator is nominated by the Head of Department to develop and maintain Business Continuity planning for the department. This will include: Attending relevant training and awareness sessions to develop knowledge and understanding of Business Continuity Management Completing the required documentation, with assistance from other members of the department Ensuring that Business Continuity plans remains fit for purpose and up to date Attending and participating in workshops and other events as required to develop the Business Impact Assessment and Business Continuity Plan and review and test the plan. Attending University run exercises and participate/lead in the running of exercises for the department as appropriate Staff It is important that everyone at the University is aware of BCM. Staff should be aware of any arrangements in their department s plan that may affect them including how they will be contacted /notified of an incident, what their role is during an incident, what they should do if they are not able to access their usual place of work, etc. 6. REPORTING STRUCTURE Business Continuity Policy Version 1 7 of 9
8 7. BUSINESS CONTINUITY STANDARD TERMINOLOGY AND DEFINITIONS Term Abbreviation Definition Business continuity BCP Documented procedures that guide organisations to respond, recover, resume, and restore to a pre-defined level of operation plan: following disruption. NOTE Typically this covers resources, services and activities required to ensure the continuity of critical business functions. Business Continuity Management BC A holistic management process that identifies potential threats to an organization and the impacts to business operations those threats, if realised, might cause, and which provides a framework for building organisational resilience with the capability of an effective response that safeguards the interests of its key stakeholders, reputation, brand and Business Impact Assessment Critical Activities Exercise /test Implementation Invocation Major Incidents Major Incident Team Minor incidents Maximum tolerable period of disruption Process Recovery time Objective BIA MIT MTPD RTO value-creating activities. Process of analysing critical activities so that their timely recovery can be achieved. The BIA includes identifying an owner for the critical activity, key resources required to deliver the activity (eg, personnel, premises, ICT), plans to recover unavailable resources and the maximum tolerable outage, Activities that would impact on the reputation of the University or have a serious impact on its financial position or stakeholders of the University if it was not performed or resumed within an appropriate defined period A process of testing business continuity plans with a view to improving department, faculty and/or University business continuity plans The technical practice within the BCM lifecycle that executes the agreed strategies and tactics through the process of developing the BCP. Act of declaring that an organisations business continuity arrangements need to be put into effect in order to continue delivery of key products and services. This will usually be declared by the Head of Department. An incident will be classed as a Major Incident if the Emergency Services declare it as such or if the Head of Department, the Security Manager or the H&S Team consider the scale, duration (Maximum Tolerable Period of Disruption) and/or impact of the incident will or is affecting a strategic building/area/process and/or the core business function and/or the reputation of the University is under threat. The Major Incident Team is a small team of Senior Managers who have the authority to make swift and major decisions in the event of a major incident. The MIT is chaired by the Registrar and Secretary and is supported by a core team of Service Heads and the Dean(s) of the affected Faculty as appropriate. Interruptions or disruptions that can be sufficiently disruptive to require the implementation of business continuity arrangements. They can be addressed by department business continuity plans. They are small scale events, affecting one or a small number of departments. Duration after which the University is irrevocably threatened if product and service delivery cannot be resumed. A set of interrelated or interacting activities which transforms inputs into outputs. The period of time following an incident within which a product or an activity must be resumed, or resources must be recovered. Business Continuity Policy Version 1 8 of 9
9 Recovery Point Objective Test RPO The maximum amount of data that may be lost when a service is restored after an incident. Recovery Point Objective is expressed as a length of time. For example a Recovery Point Objective of one day may be supported by daily backups where up to 24 hours of data may be lost. See Exercise. Business Continuity Policy Version 1 9 of 9
Business Continuity Management Policy and Framework
Management Policy and Framework Version: Produced by: Date Produced: Approved by: Updated: 7 University Manager with the assistance of the Operational Group 11 th March 2010 Steering Group (14 December
More informationProposal for Business Continuity Plan and Management Review 6 August 2008
Proposal for Business Continuity Plan and Management Review 6 August 2008 2008/8/6 Contents About Newton IT / Quality of our services. BCM & BS25999 Overview 2. BCM Development in line with BS25999 3.
More informationBusiness Continuity Management Framework 2014 2017
Business Continuity Management Framework 2014 2017 Blackpool Council Business Continuity Framework V3.0 Page 1 of 13 CONTENTS 1.0 Forward 03 2.0 Administration 04 3.0 Policy 05 4.0 Business Continuity
More informationBusiness Continuity Management
Business Continuity Management Standard Operating Procedure Notice: This document has been made available through the Police Service of Scotland Freedom of Information Publication Scheme. It should not
More informationBusiness Continuity Policy
Business Continuity Policy 1 NHS England INFORMATION READER BOX Directorate Medical Commissioning Operations Patients and Information Nursing Trans. & Corp. Ops. Commissioning Strategy Finance Publications
More informationwww.td.com.au Business Continuity - IT Disaster Recovery Discussion Paper - - Commercial in Confidence Version V2.0R Wednesday, 5 September 2012
Business Continuity - IT Disaster Recovery Discussion Paper - - Version V2.0R Wednesday, 5 September 2012 Commercial in Confidence Melbourne Sydney 79-81 Coppin St Level 2 Richmond VIC 3121 414 Kent St
More informationBUSINESS CONTINUITY MANAGEMENT FRAMEWORK
BUSINESS CONTINUITY MANAGEMENT FRAMEWORK Document Author: Civil Contingencies Service - Authorised by the CCS Joint Management Board - Version 1.0. Issued December 2012 Page 1 FRAMEWORK STATEMENT Business
More informationBUSINESS CONTINUITY STRATEGY 2014-2017
BUSINESS CONTINUITY STRATEGY 2014-2017 This strategy covers the period 01 April 2014 31 March 2017 and was approved by the Major Incident Working Group 19.03.2014 Caroline Rushmer Major Incident and Business
More informationBUSINESS CONTINUITY POLICY
BUSINESS CONTINUITY POLICY Last Review Date Approving Body n/a Audit Committee Date of Approval 9 th January 2014 Date of Implementation 1 st February 2014 Next Review Date February 2017 Review Responsibility
More informationHOW CAN YOU ENSURE BUSINESS CONTINUITY? ISO 22301 AUDITS, CERTIFICATION AND TRAINING
HOW CAN YOU ENSURE BUSINESS CONTINUITY? ISO 22301 AUDITS, CERTIFICATION AND TRAINING ISO 22301 BUSINESS CONTINUITY MANAGEMENT SYSTEMS Most organisations will, at some point, be faced with having to respond
More information1.0 Policy Statement / Intentions (FOIA - Open)
Force Policy & Procedure Reference Number Business Continuity Management D269 Policy Version Date 23 July 2015 Review Date 23 July 2016 Policy Ownership Portfolio Holder Links or overlaps with other policies
More informationBusiness Continuity Management
Business Continuity Management Policy Statement & Strategy July 2009 Basildon District Council Business Continuity Management Policy Statement The Council is committed to ensuring robust and effective
More informationBirmingham CrossCity Clinical Commissioning Group. Business Continuity Management Policy
Birmingham CrossCity Clinical Commissioning Group Business Continuity Management Policy Version V1.0 Ratified by Operational Development Group Date ratified 6 th November 2014 Name of originator / author
More informationBy. Mr. Chomnaphas Tangsook Business Director BSI Group ( Thailand) Co., Ltd
BS 25999 Business Continuity Management By. Mr. Chomnaphas Tangsook Business Director BSI Group ( Thailand) Co., Ltd 1 Contents slide BSI British Standards 2006 BS 25999(Business Continuity) 2002 BS 15000
More informationBusiness Continuity Policy and Business Continuity Management System
Business Continuity Policy and Business Continuity Management System Summary: This policy sets out the structure for ensuring that the PCT has effective Business Continuity Plans in place in order to maintain
More informationNHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY
NHS ISLE OF WIGHT CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY POLICY AUTHOR/ APPROVAL DETAILS Document Author Written By: Human Resources Authorised Signature Authorised By: Helen Shields Date: 20
More informationBusiness Continuity Policy
Business Continuity Policy Page 1 of 15 Business Continuity Policy First published: Amendment record Version Date Reviewer Comment 1.0 07/01/2014 Debbie Campbell 2.0 11/07/14 Vicky Ryan Updated to include
More informationEmergency Response and Business Continuity Management Policy
Emergency Response and Business Continuity Management Policy Owner: John Duffy, Registrar & Secretary Last updated: September 2012 Version: 04 Document control Date Version Author Changes To be populated
More informationBusiness Continuity Management Policy
Business Continuity Management Policy Business Continuity Policy Version 1.0 1 Version control Version Date Changes Author 0.1 April 13 1 st draft PH 0.2 June 13 Amendments in line with guidance PH 0.3
More informationBusiness Continuity Policy
Page 1 of 16 Business Continuity Policy Issue Date: Aug 2013 Document Number: 00241 Prepared by: Business Management and Continuity Senior Manager Next Review Date: April 2014 Page 2 of 16 NHS England
More informationBUSINESS CONTINUITY MANAGEMENT POLICY
BUSINESS CONTINUITY MANAGEMENT POLICY AUTHORISED BY: DATE: Andy Buck Chief Executive March 2011 Ratifying Committee: NHS Rotherham Board Date Agreed: Issue No: NEXT REVIEW DATE: 2013 1 Lead Director John
More informationPAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA
1 Chapter-4: Business Continuity Planning and Disaster Recovery Planning PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA Learning Objectives 2 To understand the concept of Business Continuity Management To understand
More informationUniversity of Glasgow. Policy for. Business Continuity Management
University of Glasgow Policy for Business Continuity Management 1 Policy Statement The University of Glasgow is committed to delivering the highest possible quality of service to our students, and the
More informationPrinciples for BCM requirements for the Dutch financial sector and its providers.
Principles for BCM requirements for the Dutch financial sector and its providers. Platform Business Continuity Vitale Infrastructuur Financiële sector (BC VIF) Werkgroep BCM requirements 21 September 2011
More informationNHS Hardwick Clinical Commissioning Group. Business Continuity Policy
NHS Hardwick Clinical Commissioning Group Business Continuity Policy Version Date: 26 January 2016 Version Number: 2.0 Status: Approved Next Revision Due: January 2017 Gordon Stevens MBCI Corporate Assurance
More informationBusiness Continuity (Policy & Procedure)
Business Continuity (Policy & Procedure) Publication Scheme Y/N Can be published on Force Website Department of Origin Force Operations Policy Holder Ch Supt Head of Force Ops Author Business Continuity
More informationBusiness Continuity Management Governance. Frank Higgins Abu Dhabi March 2015
Business Continuity Management Governance Frank Higgins Abu Dhabi March 2015 Different Names Same Concept BCM (Business Continuity Management) BSI 25999 IPOCM (Incident Preparedness & Operational Continuity
More informationSouth West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy
South West Lincolnshire NHS Clinical Commissioning Group Business Continuity Policy Reference No: CG 01 Version: Version 1 Approval date 18 December 2013 Date ratified: 18 December 2013 Name of Author
More informationSolihull Clinical Commissioning Group
Solihull Clinical Commissioning Group Business Continuity Policy Version v1 Ratified by SMT Date ratified 24 February 2014 Name of originator / author CSU Corporate Services Review date Annual Target audience
More informationNORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00)
NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) Subject and version number of document: Serial Number: Business Continuity Management Policy
More informationBusiness Continuity Management. Policy Statement and Strategy
Business Continuity Management Policy Statement and Strategy November 2011 Title Business Continuity Management Policy & Strategy Date of Publication: Cabinet Council Published by Borough Council of King
More informationHow To Manage A Disruption Event
BUSINESS CONTINUITY FRAMEWORK DOCUMENT INFORMATION DOCUMENT TYPE: DOCUMENT STATUS: POLICY OWNER POSITION: INTERNAL COMMITTEE ENDORSEMENT: APPROVED BY: Strategic document Approved Manager Organisational
More informationCode Subsidiary Document No. 0007: Business Continuity Management. September 2015
Code Subsidiary Document No. 0007: September 2015 Change History Version Number Date of Issue Reason For Change Change Control Reference Sections Affected 20150511 11 May 2015 For industry consultation
More informationBUSINESS CONTINUITY POLICY
BUSINESS CONTINUITY POLICY Document Type Corporate Policy Unique Identifier CO-038 Document Purpose To provide a structure through which: i. A comprehensive business continuity management system (BCMS)
More informationNHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy. Version 1.0
NHS Central Manchester Clinical Commissioning Group (CCG) Business Continuity Management (BCM) Policy Version 1.0 Document Control Title: Status: Version: 1.0 Issue date: May 2014 Document owner: (Name,
More informationBUSINESS CONTINUITY MANAGEMENT POLICY
BUSINESS CONTINUITY MANAGEMENT POLICY Version No: 1 Issue Status: awaiting Trust Board approval Date of Ratification: 11th April 2012 Ratified by: Risk Management Committee Policy Author(s): Stuart Coalwood
More informationBS 25999 BUSINESS CONTINUITY MANAGEMENT
BS 25999 BUSINESS CONTINUITY MANAGEMENT AUDIT, CERTIFICATION & training services HOW CAN YOU ENSURE BUSINESS CONTINUITY? BS 25999 AUDITS & CERTIFICATION FROM SGS Most organisations will, at some point,
More informationNOT PROTECTIVELY MARKED BUSINESS CONTINUITY. Specialist Operations Contingency Planning Business Continuity Manager 17.09.12
POLICY BUSINESS CONTINUITY Policy owners Policy holder Author Head of Services Specialist Operations Contingency Planning Business Continuity Manager Policy No. 132 Approved by Legal Services 17.09.12
More informationBSO Board Director of Human Resources & Corporate Services Business Continuity Policy. 28 February 2012
To: From: Subject: Status: Date of Meeting: BSO Board Director of Human Resources & Corporate Services Business Continuity Policy For Approval 28 February 2012 The Board is asked to agree the attached
More informationBusiness Continuity Policy
Business Continuity Policy St Mary Magdalene Academy V1.0 / September 2014 Document Control Document Details Document Title Document Type Business Continuity Policy Policy Version 2.0 Effective From 1st
More informationBUSINESS CONTINUITY POLICY RM03
BUSINESS CONTINUITY POLICY RM03 Applies to: All NHS LA employees, contractors, secondees and consultants, contractors and/or any other parties who will carry out duties on behalf of the NHS LA Version:
More informationCompany Management System. Business Continuity in SIA
Company Management System Business Continuity in SIA Document code: Classification: Company Project/Service Year Document No. Version Public INDEX 1. INTRODUCTION... 3 2. SIA S BUSINESS CONTINUITY MANAGEMENT
More informationBusiness Continuity Management and BS 25999 by Steve Chan, Head of Training - HK, BSI Management Systems
Business Continuity Management and BS 25999 by Steve Chan, Head of Training - HK, BSI Management Systems 9 April, 2008 2 Presentation content Drivers for Business Continuity Standards and definitions.
More informationTemple university. Auditing a business continuity management BCM. November, 2015
Temple university Auditing a business continuity management BCM November, 2015 Auditing BCM Agenda 1. Introduction 2. Definitions 3. Standards 4. BCM key elements IT Governance class - IT audit program
More information[INSERT NAME OF SCHOOL] BUSINESS CONTINUITY PLAN
Plan Ref No: [INSERT NAME OF SCHOOL] BUSINESS CONTINUITY PLAN PLAN DETAILS Date Written Plan Owner Plan Writer Version Number Review Schedule 6 monthly Annually Date of Plan Review Date of Plan Exercise
More informationUpdate from the Business Continuity Working Group
23 June 2014 Performance and Resources Board 19 To note Update from the Business Continuity Working Group Issue 1 The Business Continuity Working Group oversees the development, maintenance and improvement
More informationCHAPTER 1: BUSINESS CONTINUITY MANAGEMENT STRATEGY AND POLICY
Zurich Management Services Limited Registered in England: No 2741053 Registered Office The Zurich Centre, 3000 Parkway Whiteley, Fareham Hampshire, PO15 7JZ CHAPTER 1: BUSINESS CONTINUITY MANAGEMENT STRATEGY
More informationShankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD.
Business Continuity Management & Disaster Recovery Planning Presented by: Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD. 1 What is Business Continuity Management? Is a holistic management
More informationCENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT
CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT JANUARY 2008 GUIDELINE ON BUSINESS CONTINUITY GUIDELINE CBK/PG/14
More informationNHS Durham Dales, Easington and Sedgefield Clinical Commissioning Group. Business Continuity Plan
NHS Durham Dales, Easington and Sedgefield Clinical Commissioning Group Business Continuity Plan Page 1 Review To be done annually Author Chief Operating Officer Reviewer Head of Corporate Services Version
More informationBCP and DR. P K Patel AGM, MoF
BCP and DR P K Patel AGM, MoF Key difference between BS 25999 and ISO 22301 ISO 22301 puts a much greater emphasis on setting the objectives, monitoring performance and metrics aligning BC to top management
More informationBusiness Continuity Policy
Business Continuity Policy Reference Number: 243 Author & Title: Siân Dyson Resilience Manager Responsible Director: Chief Operating Officer Review Date: 29 May 2018 Ratified by: Francesca Thompson Chief
More informationEssex Clinical Commissioning Groups. Business Continuity Management System. Scope and Policy
Essex Clinical Commissioning Groups Essex Clinical Commissioning Groups Business Continuity Management System Scope and Policy Policy Author: Daniel Hale - Head of Emergency Planning Version: 1.0 Date
More informationCoping with a major business disruption. Some practical advice
Coping with a major business disruption Some practical advice Coping with a major business disruption What is business continuity? Business continuity planning (BCP) is a management process that helps
More informationJoint Universities Computer Centre Limited ( JUCC ) Information Security Awareness Training- Session Four
Joint Universities Computer Centre Limited ( JUCC ) Information Security Awareness Training- Session Four Data Handling in University Business Impact Analysis ( BIA ) Agenda Overview Terminologies Performing
More informationGlobal Statement of Business Continuity
Business Continuity Management Version 1.0-2014 Date October 18, 2014 Status Author Business Continuity Management (BCM) Page 1 of 8 Table of Contents 1. Credit Suisse Business Continuity Statement 3 2.
More informationLEEDS BECKETT UNIVERSITY. Information Security Policy. 1.0 Introduction
LEEDS BECKETT UNIVERSITY Information Security Policy 1.0 Introduction 1.1 Information in all of its forms is crucial to the effective functioning and good governance of our University. We are committed
More informationBusiness Continuity Business Continuity Management Policy
Business Continuity Business Continuity Management Policy : Date of Issue: 28 January 2009 Version no: 1.1 Review Date: January 2010 Document Owner: Patricia Hughes Document Authoriser: Tony Curtis 1 Version
More informationDEPARTMENT FOR TRANSPORT BUSINESS CONTINUITY MANAGEMENT POLICY
DEPARTMENT FOR TRANSPORT BUSINESS CONTINUITY MANAGEMENT POLICY Introduction 1. This policy is a key part of the Department for Transport s internal control framework and specifically covers the Department
More informationWILTSHIRE POLICE FORCE POLICY
Template v4 WILTSHIRE POLICE FORCE POLICY BUSINESS CONTINUITY MANAGEMENT SYSTEMS (BCMS) Effective from: July 2013 Version: 2.0 Next Review Date: July 2015 POLICY STATEMENT Wiltshire Police has a statutory
More informationBusiness continuity management policy
Business continuity management policy health.wa.gov.au Effective: XXX Title: Business continuity management policy 1. Purpose All public sector bodies are required to establish, maintain and review business
More informationExternal Supplier Control Requirements BCM
External Supplier Control Requirements BCM BCM Requirement Description BCM Tiers Recovery Time Objective Why this is important 1. Business Continuity Policy Supplier will have a documented Business Continuity
More informationSouth Norfolk Council Business Continuity Policy
South Norfolk Council Business Continuity Policy 1 Title: Business Continuity Policy Date of Publication: TBC Version: 2 Published by: Emergency Planning Team Review date: April 2014 Document Owner: Document
More informationBusiness Continuity Management Charter
Province of Nova Scotia Business Continuity Management Charter Department, Agency or Commission Name Business Continuity Coordinator Name 3/14/2014 Program Charter for Business Continuity Management Program
More informationBusiness Continuity Management Program Development Guide
Business Continuity Management Program Development Guide Prepared by The NS Emergency Management Office, Winter 2012 Version 1.1 Page 2 of 24 Document Revision History Date Author Revision Notes Fall 2011
More informationDepartmental Business Continuity Framework. Part 2 Working Guides
Department for Work and Pensions Departmental Business Continuity Framework Part 2 Working Guides Page 1 of 60 CONTENTS Guide to business impact analysis...3 Guide to business continuity planning...7 Guide
More informationBusiness Continuity Planning and Disaster Recovery Planning
4 Business Continuity Planning and Disaster Recovery Planning Basic Concepts 1. Business Continuity Management: Business Continuity means maintaining the uninterrupted availability of all key business
More informationThe PNC Financial Services Group, Inc. Business Continuity Program
The PNC Financial Services Group, Inc. Business Continuity Program subsidiaries) 1 Content Overview A. Introduction Page 3 B. Governance Model Page 4 C. Program Components Page 4 Business Impact Analysis
More informationFRAMEWORK. Approving authority. University Council. Approval date
BUSINESS CONTINUITY FRAMEWORK MANAGEMENT Approving authority Approval date Advisor Next scheduled review 2018 University Council TRIM document 2013/0014764 5 August 2013 (3/2013 meeting) Colin McAndrew
More informationJoint Universities Computer Centre Limited ( JUCC ) Information Security Awareness Training- Session Three
Joint Universities Computer Centre Limited ( JUCC ) Information Security Awareness Training- Session Three Information Security- Perspective for Management Business Impact Analysis ( BIA ) and Business
More informationWEST YORKSHIRE FIRE & RESCUE SERVICE. Business Continuity Management Strategy
WEST YORKSHIRE FIRE & RESCUE SERVICE Business Continuity Management Strategy Date Issued: 12 November 2012 Review Date: 12 November 2015 Version Control Version Number Date Author Comment 0.1 June 2011
More informationBUSINESS CONTINUITY MANAGEMENT GUIDELINES FOR BANKS AND FINANCIAL INSTITUTIONS
BUSINESS CONTINUITY MANAGEMENT GUIDELINES FOR BANKS AND FINANCIAL INSTITUTIONS DIRECTORATE OF BANKING SUPERVISION AUGUST 2009 TABLE OF CONTENTS PAGE 1.0 INTRODUCTION..3 1.1 Background...3 1.2 Citation...3
More informationLondon Borough of Bromley. Executive & Resources PDS Committee. Disaster Recovery Plans for London Borough of Bromley
Report No. DRR12/041 London Borough of Bromley PART 1 - PUBLIC Decision Maker: Executive & Resources PDS Committee Date: 4 th April 2012 Decision Type: Non-Urgent Non-Executive Non-Key Title: Disaster
More informationNHS 24 - Business Continuity Strategy
NHS 24 - Strategy Version: 0.3 Issue Date: 20/09/2005 Status: Issued for Board Approval Status: draft Page 1 of 13 Table of Contents 1 INTRODUCTION...3 2 PURPOSE...3 3 SCOPE...3 4 ASSUMPTIONS...4 5 BUSINESS
More informationAppendix 2 - Leicester City Council s Business Continuity Management Policy Statement and Strategy 2015. Business Continuity Policy Statement 2015
Appendix 2 - Leicester City Council s Business Continuity Management Policy Statement and Strategy 2015 Business Continuity Policy Statement 2015 This Policy sets the direction for Business Continuity
More informationDRAFT BUSINESS CONTINUITY MANAGEMENT POLICY
DRAFT BUSINESS CONTINUITY MANAGEMENT POLICY This document outlines a set of policies and procedures for formalising a Business Continuity programme, and provides guidelines for developing, maintaining
More informationBusiness Continuity Policy
Business Continuity Policy Summary: This policy sets out the structure for ensuring that the PCT has effective Business Continuity Plans in place in order to maintain its essential business functions during
More informationwww.pwc.com Business Resiliency Business Continuity Management - January 14, 2014
www.pwc.com Business Resiliency Business Continuity Management - January 14, 2014 Agenda Key Definitions Risks Business Continuity Management Program BCM Capability Assessment Process BCM Value Proposition
More informationUniversity of Glasgow. Business Continuity Management. Guidance Notes
University of Glasgow Business Continuity Management Guidance Notes 1 Contents Page 1 Introduction to Business Continuity Management 3 2 Roles and Responsibilities 4 3 Business Impact Analysis 5 4 Developing
More informationI attach the following documents in response:
London Fire Brigade Headquarters 169 Union Street London SE1 0LL T 020 8555 1200 F 020 7960 3602 Minicom 020 7960 3629 www.london-fire.gov.uk Freedom of Information request reference number: FOIA608.1
More informationBusiness Continuity. Is your Business Prepared for the worse? What is Business Continuity? Why use a Business Continuity Plan?
Business Continuity Is your Business Prepared for the worse? Major emergencies can develop suddenly without warning. Situations can threaten and disrupt your business and impact upon you and your staff.
More informationBUSINESS CONTINUITY MANAGEMENT POLICY
This document is uncontrolled once printed. Please check on the CCG s Intranet site for the most up to date version BUSINESS CONTINUITY MANAGEMENT POLICY DOCUMENT CONTROL Type of Document Document Title
More informationBusiness Continuity Management Policy
Governance: Business Committee Policy Owner: Chief Superintendent, Corporate Services Department: Corporate Services Policy Number: 002 Version: 3.0 Policy Writer: Business Continuity Co-ordinator Effective
More informationCouncil Policy Business Continuity Management
Policy Name: Business Continuity Management Council Policy Business Continuity Management ADOPTED BY COUNCIL: 19 th April 2016 DATE OF NEXT REVIEW: 18 th April 2020 RESPONSIBLE OFFICER: REFERENCES: Chief
More informationCITY UNIVERSITY OF HONG KONG Business Continuity Management Standard
PUBLIC Version: 1.0 CITY UNIVERSITY OF HONG KONG Business Continuity Management Standard (Approved by the Information Strategy and Governance Committee in December 2013; revision 1.1 approved by Chief
More information19. Planning. 19 PLANNING p1
19. Planning Summary Planning involves the proactive coordination of activities in the medium to long term, with the intention of achieving a unified effort towards a common objective. Planning consists
More informationUniversity of Warwick Emergency Planning Policy
University of Warwick Emergency Planning Policy Deputy Registrar s Office 1. Introduction The University of Warwick is consistently ranked in national league tables as one of the top Universities in the
More informationBUSINESS CONTINUITY MANAGEMENT PLAN
BUSINESS CONTINUITY MANAGEMENT PLAN For Thistley Hough Academy Detailing arrangements for Recovery and Resumption of Normal Academy Activity Table of Contents Section Content 1.0 About this Plan 1.1 Document
More informationBusiness Continuity & Crisis Management
Group Standard Business Continuity & Crisis Management The need to plan and respond effectively is critical to the successful management of any crisis situation. Business Continuity Management is the holistic
More informationINFOSEC.MY KNOWLEDGE SHARING SESSION
INFOSEC.MY KNOWLEDGE SHARING SESSION Integration BCM into your Organization: Challenges & Opportunities 31 st October 2007 1 Prabha Ramanathan ( CBCP, MBCI, MBCS, MSCS) Certified Business Continuity Professional.have
More informationabcdefghijklmnopqrstu
abcdefghijklmnopqrstu Business Continuity A Framework for NHS Scotland Strategic Guidance for NHS Organisations in Scotland 1 Contents 1. Introduction 4 1.1 Business Continuity Overview 5 2. Roles and
More informationRisk Management & Business Continuity Manual 2011-2014
ANNEX C Risk Management & Business Continuity Manual 2011-2014 Produced by the Risk Produced and by the Business Risk and Business Continuity Continuity Team Team February 2011 April 2011 Draft V.10 Page
More informationInstitute for Business Continuity Training 1623 Military Road, # 377 Niagara Falls, NY 14304-1745
ECP - 601: Effective Business Continuity Management: ISO 22301 This 3-day course provides an intensive, hands-on workshop covering all major aspects for the design of an effective Business Continuity Plan
More informationWhite Paper: ISO 22301 Business Continuity Management An Overview. ISO 22301 Business Continuity Management An Overview
White Paper: ISO 22301 Business Continuity Management An Overview ISO 22301 Business Continuity Management An Overview Introduction As incidents such as malicious activism, terrorist attacks and environmental
More informationAppendix 1 - Leicester City Council s Business Continuity Management Strategy and Policy Statement - 2016
Appendix 1 - Leicester City Council s Business Continuity Management Strategy and Policy Statement - 2016 Policy Statement - 2016 This Policy sets the direction for Business Continuity Management at Leicester
More informationVersion: 3.0. Effective From: 19/06/2014
Policy No: RM66 Version: 3.0 Name of Policy: Business Continuity Planning Policy Effective From: 19/06/2014 Date Ratified 05/06/2014 Ratified Business Service Development Committee Review Date 01/06/2016
More informationHarrow Business Consultative Panel. Business Continuity Management. Responsible Officer: Myfanwy Barrett Director of Finance and Business Strategy
Meeting: Harrow Business Consultative Panel Date: 18 th July 2006 Subject: Business Continuity Management Responsible Officer: Myfanwy Barrett Director of Finance and Business Strategy Contact Officer:
More informationBusiness Continuity Plans
Version Number Issue 2 Business Continuity Policy Date Revision Complete Policy Owner Author Reason for Revision Proof Read April 2016 Business Improvement Manager Emma Earle, Business Services Officer
More informationBusiness Continuity Management (BCM) Policy
Business Continuity Management (BCM) Policy Reference number: Corporate 042 Title: Business Continuity Management (BCM) Policy Version number: Version 2 Policy Approved by: LLR PCT Cluster Board Date of
More informationBUSINESS CONTINUITY & STRATEGY POLICY
BUSINESS CONTINUITY & STRATEGY POLICY Authorship: Chris Wallace, Information Governance Manager Committee Approved: Quality and Clinical Governance Committee Approved date: 1 Feb 2014 Review Date: Jan
More information