Assessment of natural hazards, man made hazards, technical and societal related risks and associated impact.

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "Assessment of natural hazards, man made hazards, technical and societal related risks and associated impact."

Transcription

1 Aon Business Continuity Planning The Aon Business Continuity Planning practice provides consulting services that allow Aon clients to measure and manage their strategic and tactical risks through Crisis Management and Business Continuity Planning. Specifically, Aon Business Continuity Planning service offerings include the following services: Assessment of natural hazards, man made hazards, technical and societal related risks and associated impact. Measurement of the physical, operational and financial impact potential from those risks. Assisting clients with the development of their approach towards managing crisis situations that may result from a wide range of exposures and situations. Assist clients with developing strategies for responding to incidents so that they can maintain their standing in the eye of the public, reduce the impact on staff, operations (internal and external), and reduce material and non material financial impact. Facilitate development of response plans that enable seamless recovery and showcase Aon s ability to respond to the real time needs of clients. Assist in the documentation process for these business continuity plans. Through these services, our consultants operate in partnership with Aon clients in a business consulting capacity that incorporates a wide array of Technical services to assist clients with their overall risk management efforts. In addition to the services provided from within Aon the practice utilizes the services of several disaster services firms that expand our capabilities in support of our clients varied disaster response related needs. The government administration community faces challenges on several fronts to maintain efficient cost structures while still remaining flexible and resilient enough to respond to interruptions of conducting business as usual in the face of adverse conditions. All of these factors have driven cost out of organizations, while driving financial and operational risks into the business. A prime set of mitigation techniques is available through effective pre incident exposure evaluation and the development of plans to respond to situations that may occur. Development of Emergency Response, Crisis Management, and Business Continuity Plans is an effective way to reduce exposures. Analysis services related to identifying, Quantifying, and Mitigating risks before incidents happen support the entire planning process and will support our clients strategic planning efforts. Aon Business Continuity Planning Services can be accessed through the following Aon Consultants: Craig Holmes- Director- Aon Business Continuity Planning, Southfield, MI Win Chaiyabhat- Sr. Consultant- Aon Business Continuity Planning, Chicago, IL Brian Eklow Sr. Consultant Aon Business Continuity Planning, Chicago, IL Anne Parkin - Consultant - Aon Business Continuity Planning, Southfield, MI Bob Siner Consultant Aon Risk Consultants, Chicago, IL Angela Page Technical Associate, Aon Business Continuity Planning, Chicago, IL Dan Hopwood Sr. Consultant, Aon Business Continuity Planning, San Diego, CA Bill Carolan Sr. Consultant, Aon Business Continuity Planning, Irvine, CA Greg Cybuls ki Sr. Consultant, Aon Business Continuity Planning, Parsippany, NJ

2 Business Continuity Planning, Frequently Asked Questions 1. What would you consider to be the foundation of a Business Continuity Plan? The foundation of any business continuity plan is the protection, prevention and mitigation of risks. The first process in Business Continuity Planning is the identification of risks. Most facilities are subject to risk of fire and theft. Other locations may be threatened by natural hazards such as flood, hurricane, or earthquake, and these hazards also need to be evaluated as part of a BCP. Business risks can also include product contamination, regulatory violations, environmental damage, or employee injury. The identification of which risks your company is exposed to is the natural starting point for any BCP. Once identified, risks can be quantified as to severity so that a prioritized loss prevention and response strategy can be developed. 2. What is the difference between Business Continuity Planning and Disaster Recovery? The term continuity infers that there is no break in service. A comprehensive Business Continuity Plan is designed to get the business back to the state of affairs where it was before a loss. The process, simply put, is to identify potential risks, determine how best to reduce these risks, what risks will impact the business most, and how to develop plans that will limit the extent of operational downtime. These plans can address events both minor and major in magnitude, with the ultimate goal of maintaining customer satisfaction. The term Disaster Recovery would imply that the organization has suffered a loss of a large magnitude. This may even involve events of regional impact such as earthquake or hurricane that will strain available local resources. Your disaster recovery plan will address these worst case scenario occurrences. In the field of Business Continuity Planning, Disaster Recovery also refers to restoration of computer operations, and this is a specialized area of recovery planning. Technology and systems available today will allow shadowing or mirroring of data. 3. What is Crisis Management? The intent of Crisis Management is to limit the extent of negative impacts to important organizational values, functions and services, and which could result in major damage to the organization, it s employees, products, services and reputation. As such, the focus of a CMP is to keep a crisis from increasing in intensity and adversely affecting an organization. An organization can have a crisis with no losses to facilities or technologies. A CMP usually focuses on threat scenarios that may include product tampering or recalls, environmental accidents, terrorism, loss of life, kidnapping, crimes on site, embezzlement, fraud, etc. In these instances, internal and external communication policies can affect public and employee perceptions of the company. The CMP differs from a business recovery plan in that it s purpose is to manage the crisis rather than focus on recovery of the business functions and services. 4. Who will need to be involved in the Business Continuity Planning (BCP) process? The process will need a senior level sponsor such as a Vice President or Director to show that it has the backing of senior management. Ideally the process will involve the following individuals plus their key members of staff: Facilities Manager Controller Human Resources Manager Production Manager Safety/Security Manager Risk Manager Individual business unit managers or directors Technology: IT/IS, logistics or other technology support Quality Assurance Legal

3 5. I have been told by Corporate that my division needs to get a Business Continuity Plan in place by the end of this quarter, is this a reasonable goal to achieve? The development of a full and complete BCP varies by company and type of business. For example, a manufacturing plant that has a multitude of processes with supplied from various single source suppliers and a multitude of client both internal to the organization and external to the organization will need to spend a lot longer on developing their plan than on a warehouse. The initial stages of developing the plan can be completed by the end of one quarter. This stage is to carry out a full Needs Assessment, and a Business Impact Analysis, which shows how various areas of your business will be impacted in the event of an incident. 6. How long will it take to get the plan developed? Again the amount of time that it takes to develop the plan depends upon the complexity of operations at your facility, and the number of people involved in the development of the plan along with the amount of time that they have to devote to working on the plan s development. Generally to complete a BCP from the initial stages through to final testing of the process takes approximately a year, or possibly longer depending on the complexity of the particular company. However it should be made clear that any BCP is never finished. It is a living document that needs constantly updating with new phone numbers and contact information, and as such one person should take ownership of it to ensure that it is kept up to date. 7. Will I need to develop the entire plan now, or can this be accomplished in phases? It is often best to develop the plan in phases. This allows you to take some time to judge how things are progressing, and to carry out a process check to ensure that everyone is working from the same page and heading in the same direction. It is useful to review the results of the Business Impact Analysis prior to commencing work on the plan itself and to ensure that all parties agree on the priorities for organizational critical functions. Once the work gets started on the plan itself, then it is a good idea to keep the momentum of this process going, as it can often be a tedious process and it is important that all participants are kept involved. 8. My company may have several critical functions that will need a recovery plan, where should I start? The best place to start is to carry out a Needs Assessment to review all areas of the business and to get acceptance from all areas of the business as to the most critical functions and then to proceed on from there. The Needs Assessment allows management to identify the primary areas of concern, and properly prioritize the planning activities. It defines and analyzes the organization, and then identifies criticality within the company. It specifically focuses attention upon functions, which will cause impairment of multiple portions of an organization if lost, or curtailed. Once the Needs Assessment is complete then a full Business Impact Analysis should be carried out. 9. I already have plans in place for my IT department surely I don t need to do anything else? At many organizations, plans may exis t at an intuitive level, be part of normal operations planning, or may even be formally documented. One area that is typically addressed is recovery of computer operations. While it is beneficial to have plans for recovery of specific and critical business functions, a complete business continuity plan will deal with the strategic recovery of all operations. By carrying out a Needs Assessment, you will determine where plans exist, evaluate how effective these plans might be, identify where new plans need to be developed, or if existing plans should be modified. 10. If it is determined that an exposure exists due to a single or sole source supplier, is there anything I can do about it? There are several strategies that can be employed to reduce the impact of a single source supplier. First, it should be determined if the supplier has a business continuity plan of their own (i.e. backup manufacturing facility), and how effective the plan will be. Past and current efforts should include risk identification and mitigation strategies designed to reduce the likelihood of physical loss to a single site. If the maximum

4 extent of a supplier s outage can be accurately predicted, it may be prudent to plan for a buffer stock to cover this time period. Another strategy will involve cultivating alternate suppliers for these components, such that the secondary source will provide only a portion of the total needs, yet their output could be increased over a short period of time to meet 100% of total demand. 11. Can I do the work myself with some training? There are a variety of courses that are offered to individuals that are interested in learning about BCP. The most popular ones are offered by the Disaster Recovery Institute and are held 2-3 times a year. They will provide the basics of Business Continuity Planning, Business Impact Analysis, how to manage your BCP and other relevant topics. Once an individual has gained a thorough knowledge of BCP they could then develop the plan for their company. 12. What software is used to document the plan, and can I use it? There are various types of software available to document the plan. The most popular one is Strohl systems. The downside of using any type of specific software is that a user needs to have training in it in order to get the best use out of it. The software also requires the cost of an annual license. Any plan will need to be printed out in a hard copy form to ensure that it is available if there is no access to electronic copies. A lot of companies have found that it is just as easy to document their plans using word processing software that the majority of people are comfortable using. There is no specific training needed for this software and maneuvering around the document can be facilitated by the use of hyperlinks. 13. How might my company be affected by future terrorist activity? That will depend largely on the nature of your business, the extent of international operations, name/brand recognition, or other factors that may make your business a target of terrorist activity. An analysis of the potential threat, and existing security measures will help you determine your exposure to a direct terrorist attack. A more likely scenario will involve terrorist attacks to the public sector utilities and service providers such as the recent attacks involving the mail. You should ask yourself What if? there was a disruption to vital services such as electrical power, telephone, natural gas, or mail delivery. The answers to these questions will help you develop a plan for each possible occurrence. 14. My company has an Emergency Plan to get employees out of the building but nothing after that. Where should we start? Employee safety is a priority, and it is critical that evacuation plans be tested on a regular basis. Once you have accounted for all of your employees, the emergency is over, and the building has been secured, damage assessment team should be formed to determine the magnitude of the crisis. The damage assessment team should include individuals from each major business function. This is the start of the recovery process, which will need to be documented. It will involve possible re-location of operations, crisis communication (both external, i.e. media, and internal), initiation of restoration services, and insurance claims processing. Pre-planning for alternate workspace, computer hot or cold sites, restoration service providers, and development of a written crisis communication plan will help expedite your company s recovery. 15. What are some things I can do right now to improve my recovery possibilities? Draw up a process flow diagram for your most important processes so that you can see where you are likely to have interdependencies within your company and where you have issues with regard to sole suppliers. Review where there are single source and sole source suppliers. And look at alternatives to these suppliers or work with these suppliers to ensure that they have back up plans in the event that they have an incident.

5 Ensure that you have a good evacuation plan in place and that you know how to contact all employees in the event of an incident. Ensure that emergency responders are properly trained, and that designated alternates know their role as well. Draw up a list of contractors that are able and willing to assist you in the event of a building problem. Get full contact numbers and back up contractors available if first choice contractors are unavailable at the time of the incident. Have a recovery strategy and priorities agreed to by company executives. 16. My insurance program has become very expensive as a result of 9/11, and purchasing BI has become very expensive, contingent BI is almost impossible to purchase. Can drawing up a Business Continuity Plan help me? At the moment there has been no clear connection between having a Business Continuity Plan in place and not having one in place with regard to purchasing BI insurance. The process of drawing up a BCP will help a company to determine it s precise BI value for each location. It will also help a company to work with their suppliers to limit contingent business interruption by encouraging recovery planning. Another benefit from the BCP process is that is may identify otherwise uninsured, or un-insurable business interruption potential such as downtime caused by regulatory violations, chemical releases, or other perils not normally covered by a standard insurance contract.

PAPER-6 PART-3 OF 5 CA A.RAFEQ, FCA

PAPER-6 PART-3 OF 5 CA A.RAFEQ, FCA Chapter-4: Business Continuity Planning and Disaster Recovery Planning PAPER-6 PART-3 OF 5 CA A.RAFEQ, FCA Learning Objectives 2 To understand the concept of Business Continuity Management To understand

More information

Disaster Recovery Plan (DRP) / Business Continuity Plan (BCP)

Disaster Recovery Plan (DRP) / Business Continuity Plan (BCP) Preface Computer systems are the core tool of today s business and are vital to every business from the smallest to giant organizations. Money transactions, customer service are just simple examples. Despite

More information

Business Continuity Planning for Risk Reduction

Business Continuity Planning for Risk Reduction Business Continuity Planning for Risk Reduction Ion PLUMB ionplumb@yahoo.com Andreea ZAMFIR zamfir_andreea_ileana@yahoo.com Delia TUDOR tudordelia@yahoo.com Faculty of Management Academy of Economic Studies

More information

Continuity of Operations Planning. A step by step guide for business

Continuity of Operations Planning. A step by step guide for business What is a COOP? Continuity of Operations Planning A step by step guide for business A Continuity Of Operations Plan (COOP) is a MANAGEMENT APPROVED set of agreed-to preparations and sufficient procedures

More information

A guide to business continuity jelfsmallbusiness.co.uk 01905 888397

A guide to business continuity jelfsmallbusiness.co.uk 01905 888397 Business Continuity Management A guide to business continuity jelfsmallbusiness.co.uk 01905 888397 We know you re always going to try your best for your business, but things do occasionally and unexpectedly

More information

BUSINESS IMPACT ANALYSIS.5

BUSINESS IMPACT ANALYSIS.5 Table of Contents I. GENERAL.3 Introduction.3 Scope.3 Components.3 II. BUSINESS IMPACT ANALYSIS.5 Academic Affairs...5 Finance and Administration.6 Planning and Accountability..8 Student Affairs.8 Institutional

More information

Business Continuity Planning

Business Continuity Planning Business Continuity Planning We believe all organisations recognise the importance of having a Business Continuity Plan, however we understand that it can be difficult to know where to start. That s why

More information

Information Security Management: Business Continuity Planning. Presentation by Stanislav Nurilov March 9th, 2005 CS 996: Info. Sec. Mgmt.

Information Security Management: Business Continuity Planning. Presentation by Stanislav Nurilov March 9th, 2005 CS 996: Info. Sec. Mgmt. Information Security Management: Business Continuity Planning Presentation by Stanislav Nurilov March 9th, 2005 CS 996: Info. Sec. Mgmt. Overview BCP: Definition BCP: Need for (Why?) BCP: When BCP: Who

More information

Constructing a successful business continuity plan

Constructing a successful business continuity plan Constructing a successful business continuity plan By Alan Berman Alan Berman Being prepared is the cornerstone of having a business continuity plan regardless of the size of a company. Ultimately, getting

More information

www.pwc.com Business Resiliency Business Continuity Management - January 14, 2014

www.pwc.com Business Resiliency Business Continuity Management - January 14, 2014 www.pwc.com Business Resiliency Business Continuity Management - January 14, 2014 Agenda Key Definitions Risks Business Continuity Management Program BCM Capability Assessment Process BCM Value Proposition

More information

Business Continuity Planning in IT

Business Continuity Planning in IT Introduction: Business Continuity Planning in IT The more your business relies on its IT systems, the more you need to consider how unexpected disruptions might affect your business. These disruptions

More information

Business Continuity and Crisis Management

Business Continuity and Crisis Management Business Continuity and Crisis Management Crisis Management, Business Continuity and The Incident Command System Understanding Differences and Putting it all together? by Max Ckonjevic FBCI, CBCP 1 Objectives

More information

Business continuity plan

Business continuity plan Business continuity plan CONTENTS INTRODUCTION 2 - Scope - Components BUSINESS IMPACT ANALYSIS 3 - Business Affairs - Information Technology RISK ASSESSMENT 5 - Broad Categories of Hazards - Hazard Table

More information

How to Design and Implement a Successful Disaster Recovery Plan

How to Design and Implement a Successful Disaster Recovery Plan How to Design and Implement a Successful Disaster Recovery Plan Feb. 21 ASA Office-Administrative Section is Sponsored by Today s ASAPro Webinar is Brought to You by the How to Ask a Question Questions

More information

Our Colorado region is offering a FREE Disaster Recovery Review promotional through June 30, 2009!

Our Colorado region is offering a FREE Disaster Recovery Review promotional through June 30, 2009! Disaster Recovery Review FREE Promotional Offer Our Colorado region is offering a FREE Disaster Recovery Review promotional through June 30, 2009! This review is designed to help the small business better

More information

Coping with a major business disruption. Some practical advice

Coping with a major business disruption. Some practical advice Coping with a major business disruption Some practical advice Coping with a major business disruption What is business continuity? Business continuity planning (BCP) is a management process that helps

More information

EMERGENCY PREPAREDNESS PLAN Business Continuity Plan

EMERGENCY PREPAREDNESS PLAN Business Continuity Plan EMERGENCY PREPAREDNESS PLAN Business Continuity Plan GIS Bankers Insurance Group Powered by DISASTER PREPAREDNESS Implementation Small Business Guide to Business Continuity Planning Surviving a Catastrophic

More information

THE USE OF TRIZ IN BUSINESS CONTINUITY PLANNING

THE USE OF TRIZ IN BUSINESS CONTINUITY PLANNING THE USE OF TRIZ IN BUSINESS CONTINUITY PLANNING Jack Hipple Innovation-TRIZ Tampa, FL Steve Elliott Elliot Consulting Tampa, FL Abstract The principles of TRIZ continue to find applications in fields outside

More information

Business Continuity Management Systems. Protecting for tomorrow by building resilience today

Business Continuity Management Systems. Protecting for tomorrow by building resilience today Business Continuity Management Systems Protecting for tomorrow by building resilience today Vital statistics 31% 40% of UK businesses have been affected by bad weather related transport problems, power

More information

Why Should Companies Take a Closer Look at Business Continuity Planning?

Why Should Companies Take a Closer Look at Business Continuity Planning? whitepaper Why Should Companies Take a Closer Look at Business Continuity Planning? How Datalink s business continuity and disaster recovery solutions can help organizations lessen the impact of disasters

More information

Business Continuity Planning and Disaster Recovery Planning

Business Continuity Planning and Disaster Recovery Planning 4 Business Continuity Planning and Disaster Recovery Planning Basic Concepts 1. Business Continuity Management: Business Continuity means maintaining the uninterrupted availability of all key business

More information

Business Continuity and Disaster Recovery Planning

Business Continuity and Disaster Recovery Planning Business Continuity and Disaster Recovery Planning Jennifer Brandt, CISA A p r i l 16, 2015 HISTORY OF STINNETT & ASSOCIATES Stinnett & Associates (Stinnett) is a professional advisory firm offering services

More information

Business Continuity Planning for Schools, Departments & Support Units

Business Continuity Planning for Schools, Departments & Support Units Business Continuity Planning for Schools, Departments & Support Units 1 What is Business Continuity Planning? Examples Planning for an adverse, major or catastrophic event that would cause a disruption

More information

Business Continuity Planning and Disaster Recovery Planning. Ed Crowley IAM/IEM

Business Continuity Planning and Disaster Recovery Planning. Ed Crowley IAM/IEM Business Continuity Planning and Disaster Recovery Planning Ed Crowley IAM/IEM 1 Goals Compare and contrast aspects of business continuity Execute disaster recovery plans and procedures 2 Topics Business

More information

Business Continuity & Disaster Recovery

Business Continuity & Disaster Recovery Business Continuity & Disaster Recovery Safety First Quality Every Time 1 Business Continuity & Disaster Recovery Planning Who here has a formal Business Continuity & Disaster Recovery plan? The purpose

More information

Business Continuity Planning Guide

Business Continuity Planning Guide Business Continuity Planning Guide For Small Businesses Prepared by the City of Vaughan Emergency Planning Department 1 Business Continuity Planning Business Continuity Planning (BCP) is a planning process

More information

Business Continuity Planning advice for Businesses with 50-250 employees

Business Continuity Planning advice for Businesses with 50-250 employees Business Continuity Planning advice for Businesses with 50-250 employees Where to begin? A business continuity plan should consist of a business and contingencies analysis. It needs to be developed by

More information

IT Disaster Recovery Plan Template

IT Disaster Recovery Plan Template HOPONE INTERNET CORP IT Disaster Recovery Plan Template Compliments of: Tim Sexton 1/1/2015 An information technology (IT) disaster recovery (DR) plan provides a structured approach for responding to unplanned

More information

PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA

PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA 1 Chapter-4: Business Continuity Planning and Disaster Recovery Planning PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA Learning Objectives 2 To understand the concept of Business Continuity Management To understand

More information

Business Continuity. Is your Business Prepared for the worse? What is Business Continuity? Why use a Business Continuity Plan?

Business Continuity. Is your Business Prepared for the worse? What is Business Continuity? Why use a Business Continuity Plan? Business Continuity Is your Business Prepared for the worse? Major emergencies can develop suddenly without warning. Situations can threaten and disrupt your business and impact upon you and your staff.

More information

disaster recovery and contingency plan RISK MANAGEMENT MADE TO MEASURE

disaster recovery and contingency plan RISK MANAGEMENT MADE TO MEASURE disaster recovery and contingency plan RISK MANAGEMENT MADE TO MEASURE INTRODUCTION Contingency planning for business continuity (business continuity management) is defined by the Institute of Business

More information

It s the Business! Business continuity considerations for all organisations

It s the Business! Business continuity considerations for all organisations It s the Business! Business continuity considerations for all organisations It ll never happen to me That s what they all say isn t it? But it happens a lot more than you d think. Statistics show that

More information

Business Continuity Planning

Business Continuity Planning Business Continuity Planning Assistance for Young Enterprise Business Continuity Planning for small to medium-sized businesses This information will guide you through some steps that could help your business

More information

An Introduction to. Business Continuity Planning

An Introduction to. Business Continuity Planning An Introduction to Business Continuity Planning Company Profile Practical Experience European Head Office Extensive Client Base Established 1998 Expert Consultants Global Network Why BCP? I am often asked

More information

Desktop Scenario Self Assessment Exercise Page 1

Desktop Scenario Self Assessment Exercise Page 1 Page 1 Neil Jarvis Head of IT Security & IT Risk DHL Page 2 From reputation to data loss - how important is business continuity? Neil Jarvis Head of IT Security (EMEA) DHL Logistics IT Security Taking

More information

FORMULATING YOUR BUSINESS CONTINUITY PLAN

FORMULATING YOUR BUSINESS CONTINUITY PLAN WHITE PAPER Page 0 Planning for the Worst Case Scenario: FORMULATING YOUR BUSINESS CONTINUITY PLAN 9 Wing Drive Cedar Knolls, NJ 07927 www.nac.net Page 1 Table of Contents Overview... 2 What is Disaster

More information

Creating a Business Continuity Plan for your Health Center

Creating a Business Continuity Plan for your Health Center Creating a Business Continuity Plan for your Health Center 1 Page Left Intentionally Blank 2 About This Manual This tool is the result of collaboration between the Primary Care Development Corporation

More information

Assessing Your Disaster. Andrews Hooper Pavlik PLC. Andrews Hooper Pavlik PLC

Assessing Your Disaster. Andrews Hooper Pavlik PLC. Andrews Hooper Pavlik PLC Assessing Your Disaster Recovery Plans Gregory H. Soule, CPA, CISA, CISSP, CFE Andrews Hooper Pavlik PLC Andrews Hooper Pavlik PLC Agenda Business Continuity Concepts Impact Analysis Risk Assessment Risk

More information

Business Continuity Plan

Business Continuity Plan Business Continuity Plan October 2007 Agenda Business continuity plan definition Evolution of the business continuity plan Business continuity plan life cycle FFIEC & Business continuity plan Questions

More information

NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00)

NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) Subject and version number of document: Serial Number: Business Continuity Management Policy

More information

Offsite Disaster Recovery Plan

Offsite Disaster Recovery Plan 1 Offsite Disaster Recovery Plan Offsite Disaster Recovery Plan Presented By: Natan Verkhovsky President Disty Portal Inc. 2 Offsite Disaster Recovery Plan Introduction This document is a comprehensive

More information

BUSINESS CONTINUITY PLANNING

BUSINESS CONTINUITY PLANNING Policy 8.3.2 Business Responsible Party: President s Office BUSINESS CONTINUITY PLANNING Overview The UT Health Science Center at San Antonio (Health Science Center) is committed to its employees, students,

More information

Chapter I: Fundamentals of Business Continuity Management

Chapter I: Fundamentals of Business Continuity Management Chapter I: Fundamentals of Business Continuity Management Objectives Define Business Continuity Management (BCM) Define the relationship between BCM and risk management Review BCM responsibilities Identify

More information

White Paper AN INTRODUCTION TO BUSINESS CONTINUITY PLANNING AND SOLUTIONS FOR IT AND TELECOM DECISION MAKERS. Executive Summary

White Paper AN INTRODUCTION TO BUSINESS CONTINUITY PLANNING AND SOLUTIONS FOR IT AND TELECOM DECISION MAKERS. Executive Summary AN INTRODUCTION TO BUSINESS CONTINUITY PLANNING AND SOLUTIONS FOR IT AND TELECOM DECISION MAKERS Executive Summary Today s businesses rely heavily on voice communication systems and data networks to such

More information

<Client Name> IT Disaster Recovery Plan Template. By Paul Kirvan, CISA, CISSP, FBCI, CBCP

<Client Name> IT Disaster Recovery Plan Template. By Paul Kirvan, CISA, CISSP, FBCI, CBCP IT Disaster Recovery Plan Template By Paul Kirvan, CISA, CISSP, FBCI, CBCP Revision History REVISION DATE NAME DESCRIPTION Original 1.0 2 Table of Contents Information Technology Statement

More information

Business Continuity Planning. Presentation and. Direction

Business Continuity Planning. Presentation and. Direction Business Continuity Planning Presentation and Direction Thomas Bronack, president Data Center Assistance Group, Inc. 15180 20 th Avenue Whitestone, NY 11357 Phone: (718) 591-5553 Email: bronackt@dcag.com

More information

BUSINESS CONTINUITY PLAN OVERVIEW

BUSINESS CONTINUITY PLAN OVERVIEW BUSINESS CONTINUITY PLAN OVERVIEW INTRODUCTION The purpose of this document is to provide Loomis customers with an overview of the company s Business Continuity Plan (BCP). Because of the specific and

More information

BUSINESS CONTINUITY PLANNING GUIDELINES

BUSINESS CONTINUITY PLANNING GUIDELINES BUSINESS CONTINUITY PLANNING GUIDELINES Washington University in St. Louis The purpose of this guide is to serve as a tool to all departments, divisions, and labs across the University in building a Business

More information

Table of Contents... 1

Table of Contents... 1 ... 1 Chapter 1 Introduction... 4 1.1 Executive Summary... 4 1.2 Goals and Objectives... 5 1.3 Senior Management and Board of Directors Responsibilities... 5 1.4 Business Continuity Planning Processes...

More information

William Rider Manager Disaster Recovery & Data Security The Johns Hopkins Health System & University

William Rider Manager Disaster Recovery & Data Security The Johns Hopkins Health System & University William Rider Manager Disaster Recovery & Data Security The Johns Hopkins Health System & University Competitive Leadership- Twelve Principles For Success Brian Billick Chapter 3 Be Be Prepared The time

More information

Unit Guide to Business Continuity/Resumption Planning

Unit Guide to Business Continuity/Resumption Planning Unit Guide to Business Continuity/Resumption Planning (February 2009) Revised June 2011 Executive Summary... 3 Purpose and Scope for a Unit Business Continuity Plan(BCP)... 3 Resumption Planning... 4 Assumptions

More information

Business Continuity Management

Business Continuity Management Business Continuity Management cliftonlarsonallen.com Introductions Brian Pye CliftonLarsonAllen Senior Manager Business Risk Services group 15 years of experience with Business Continuity Megan Moore

More information

STEP-BY-STEP BUSINESS CONTINUITY AND EMERGENCY PLANNING MAY 27 2015

STEP-BY-STEP BUSINESS CONTINUITY AND EMERGENCY PLANNING MAY 27 2015 STEP-BY-STEP BUSINESS CONTINUITY AND EMERGENCY PLANNING MAY 27 2015 AGENDA: Emergency Management Business Continuity Planning Q & A MONTH DAY, YEAR TITLE OF THE PRESENTATION 2 CANADIAN RED CROSS Disaster

More information

Preparing a Disaster Recovery Plan (Church)

Preparing a Disaster Recovery Plan (Church) Preparing a Disaster Recovery Plan (Church) In the event of a serious fire, a church may be required to close during the rebuilding period. The rebuilding process can take up to two years or more. Heritage

More information

85-01-55 Overview of Business Continuity Planning Sally Meglathery Payoff

85-01-55 Overview of Business Continuity Planning Sally Meglathery Payoff 85-01-55 Overview of Business Continuity Planning Sally Meglathery Payoff Because a business continuity plan affects all functional units within the organization, each functional unit must participate

More information

Risk Management Guidelines

Risk Management Guidelines Business Continuity Management Understanding Risk We live in an unpredictable world. No matter how effectively a business protects itself through insurance, there are some risks that cannot be anticipated,

More information

Disaster Recovery Planning

Disaster Recovery Planning Disaster Recovery Planning NOW or NEVER Disaster Recovery Team Aura Advanced Technologies Aura Advanced Technologies Inc 1301-1121 Sixth Avenue SW Calgary, Alberta T2P 5J4 Phone: 403-269-6123 Fax: 403-269-6169

More information

Business Continuity Planning and Disaster Recovery Planning

Business Continuity Planning and Disaster Recovery Planning Business Continuity Planning and Disaster Recovery Planning Ed Crowley IAM/IEM 1 ISC 2 Key Areas of Knowledge Understand business continuity requirements 1. Develop and document project scope and plan

More information

Business Continuity and Disaster Planning

Business Continuity and Disaster Planning WHITE PAPER Business Continuity and Disaster Planning A guide to preparing for the unexpected Robert Drewniak Director, Strategic & Advisory Services Disasters are not always the result of high winds and

More information

Disaster Recovery Planning Process

Disaster Recovery Planning Process Disaster Recovery Planning Process By Geoffrey H. Wold Part I of III This is the first of a three-part series that describes the planning process related to disaster recovery. Based on the various considerations

More information

Federal Financial Institutions Examination Council FFIEC. Business Continuity Planning BCP MARCH 2003 MARCH 2008 IT EXAMINATION

Federal Financial Institutions Examination Council FFIEC. Business Continuity Planning BCP MARCH 2003 MARCH 2008 IT EXAMINATION Federal Financial Institutions Examination Council FFIEC Business Continuity Planning MARCH 2003 MARCH 2008 BCP IT EXAMINATION H ANDBOOK TABLE OF CONTENTS INTRODUCTION... 1 BOARD AND SENIOR MANAGEMENT

More information

Section A: Introduction, Definitions and Principles of Infrastructure Resilience

Section A: Introduction, Definitions and Principles of Infrastructure Resilience Section A: Introduction, Definitions and Principles of Infrastructure Resilience A1. This section introduces infrastructure resilience, sets out the background and provides definitions. Introduction Purpose

More information

Business Continuity. Port environment

Business Continuity. Port environment Business Continuity Port environment DEFINE BUSINESS CONTINUITY WHAT IT IS NOT RECOVERY FOCUS: PEOPLE PROCESSES TECHNOLOGY DELIVERABLES INFRAGARD DEFINITION MANAGEMENT PROCESS DEVELOPING ADVANCE PROCEDURES

More information

Data Center Assistance Group, Inc. DCAG Contact: Tom Bronack Phone: (718) 591-5553 Email: bronackt@dcag.com Fax: (718) 380-7322

Data Center Assistance Group, Inc. DCAG Contact: Tom Bronack Phone: (718) 591-5553 Email: bronackt@dcag.com Fax: (718) 380-7322 Business Continuity and Disaster Recovery Job Descriptions Table of Contents Business Continuity Services Organization Chart... 2 Director Business Continuity Services Group... 3 Manager of Business Recovery

More information

Company Management System. Business Continuity in SIA

Company Management System. Business Continuity in SIA Company Management System Business Continuity in SIA Document code: Classification: Company Project/Service Year Document No. Version Public INDEX 1. INTRODUCTION... 3 2. SIA S BUSINESS CONTINUITY MANAGEMENT

More information

Each section has handy hints and advice on completing your plan along with links to further information which you can download and print.

Each section has handy hints and advice on completing your plan along with links to further information which you can download and print. Information on business continuity plans for businesses with 10 or fewer employees You will find that it is quick, easy and inexpensive to create a business continuity plan. This is a basic five-step guide

More information

Managing risk, insurance and terrorism

Managing risk, insurance and terrorism COUNTING THE COST Managing risk, insurance and terrorism produced by NaCTSO wishes to acknowledge the contributions made by many individuals associated with the following organisations: Home Office: The

More information

Prepared by Rod Davis, ABCP, MCSA November, 2011

Prepared by Rod Davis, ABCP, MCSA November, 2011 Prepared by Rod Davis, ABCP, MCSA November, 2011 Disaster an event, which causes the loss of an essential service, or part of it, for a length of time which imperils mission achievement. (Andrew Hiles,

More information

BUSINESS CONTINUITY MANAGEMENT A Guide for Businesses In Northamptonshire

BUSINESS CONTINUITY MANAGEMENT A Guide for Businesses In Northamptonshire BUSINESS CONTINUITY MANAGEMENT A Guide for Businesses In Northamptonshire 1 What is Business Continuity? Business Continuity is a planning process which provides a framework to ensure the resilience of

More information

Audit and Governance Committee 24 September 2015 Business Continuity Plan

Audit and Governance Committee 24 September 2015 Business Continuity Plan Audit and Governance Committee 24 September 2015 Business Continuity Plan For Information Portfolio Holder(s) Environmental Protection & Assets Senior Leadership Team Contact: Strategic Director 1. Purpose

More information

NCUA LETTER TO CREDIT UNIONS

NCUA LETTER TO CREDIT UNIONS NCUA LETTER TO CREDIT UNIONS NATIONAL CREDIT UNION ADMINISTRATION 1775 Duke Street, Alexandria, VA 22314 DATE: December 2001 LETTER NO.: 01-CU-21 TO: SUBJ: ENCL: All Federally Insured Credit Unions Disaster

More information

Disaster Recovery and Business Continuity What Every Executive Needs to Know

Disaster Recovery and Business Continuity What Every Executive Needs to Know Disaster Recovery and Business Continuity What Every Executive Needs to Know Bruce Campbell & Sandra Evans Contents Why you need DR and BC What constitutes a Disaster? The difference between disaster recovery

More information

Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD.

Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD. Business Continuity Management & Disaster Recovery Planning Presented by: Shankar Gawade VP IT INFRASTRUCTURE ENAM SECURITIES PVT. LTD. 1 What is Business Continuity Management? Is a holistic management

More information

A To Do List to Improve Supply Chain Risk Management Capabilities

A To Do List to Improve Supply Chain Risk Management Capabilities A To Do List to Improve Supply Chain Risk Management Capabilities Investigators: Debra Elkins General Motors R&D Center Mailcode 480-106-359 30500 Mound Road Warren, MI 48090 Phone: 586-986-2750 FAX: 586-986-0574

More information

KPMG Information Risk Management Business Continuity Management Peter McNally, KPMG Asia Pacific Leader for Business Continuity

KPMG Information Risk Management Business Continuity Management Peter McNally, KPMG Asia Pacific Leader for Business Continuity INFORMATION RISK MANAGEMENT KPMG Information Risk Management Business Continuity Management Peter McNally, KPMG Asia Pacific Leader for Business Continuity ADVISORY Contents Agenda: Global trends and BCM

More information

Business Continuity Business Continuity Management Policy

Business Continuity Business Continuity Management Policy Business Continuity Business Continuity Management Policy : Date of Issue: 28 January 2009 Version no: 1.1 Review Date: January 2010 Document Owner: Patricia Hughes Document Authoriser: Tony Curtis 1 Version

More information

Emergency Preparedness Guidelines

Emergency Preparedness Guidelines DM-PH&SD-P7-TG6 رقم النموذج : I. Introduction This Guideline on supports the national platform for disaster risk reduction. It specifies requirements to enable both the public and private sector to develop

More information

Federal Financial Institutions Examination Council FFIEC BCP. Business Continuity Planning FEBRUARY 2015 IT EXAMINATION H ANDBOOK

Federal Financial Institutions Examination Council FFIEC BCP. Business Continuity Planning FEBRUARY 2015 IT EXAMINATION H ANDBOOK Federal Financial Institutions Examination Council FFIEC Business Continuity Planning BCP FEBRUARY 2015 IT EXAMINATION H ANDBOOK Table of Contents Introduction 1 Board and Senior Management Responsibilities

More information

Business Continuity Planning Overview. Alanna Sumner Senior EHS Consultant

Business Continuity Planning Overview. Alanna Sumner Senior EHS Consultant Business Continuity Planning Overview Alanna Sumner Senior EHS Consultant Objectives Introduction Why is Business Continuity Planning important? BCP Process Cycle BCP Program Overview Successful BCP Programs

More information

Building a strong business continuity plan

Building a strong business continuity plan Building a strong business continuity plan Protect your clients and firm with a well-planned business continuity plan A solid business continuity plan (BCP) is about more than simply staying in compliance.

More information

BCP (Business Continuity Plan)

BCP (Business Continuity Plan) (Translation) BCP (Business Continuity Plan) September 26, 2008 Tokyo Financial Exchange Inc. Tokyo Financial Exchange Inc. ( TFX ) has been committed in establishing a system which ensures stable and

More information

Building Economic Resilience to Disasters: Developing a Business Continuity Plan

Building Economic Resilience to Disasters: Developing a Business Continuity Plan Building Economic Resilience to Disasters: Developing a Business Continuity Plan Buffalo Niagara Region February 26, 2014 Gail Moraton, CBCP Business Resiliency Manager Business Resiliency one important

More information

Emergency Response and Business Continuity Management Policy

Emergency Response and Business Continuity Management Policy Emergency Response and Business Continuity Management Policy Owner: John Duffy, Registrar & Secretary Last updated: September 2012 Version: 04 Document control Date Version Author Changes To be populated

More information

Clinic Business Continuity Plan Guidelines

Clinic Business Continuity Plan Guidelines Clinic Business Continuity Plan Guidelines Published: January 2015 Table of Contents Emergency Notification Contacts Primary... 2 Emergency Notification Contacts Backups (in case primary is unavailable)...

More information

Some companies never recover from a disaster related loss. A business that cannot operate will lose money, customers, credibility, and good will.

Some companies never recover from a disaster related loss. A business that cannot operate will lose money, customers, credibility, and good will. How Disaster Recovery Planning Can Be Leveraged For Electronic Discovery and Litigation Response Digital Discovery and e-evidence John Connell April 1. 2008 Hurricanes, floods, earthquakes, power outages,

More information

Business Continuity Planning Instructions

Business Continuity Planning Instructions Business Continuity Planning Instructions Business continuity planning is a proactive planning process that ensures critical services or products are delivered during a disruption. In creating the plan,

More information

Temple university. Auditing a business continuity management BCM. November, 2015

Temple university. Auditing a business continuity management BCM. November, 2015 Temple university Auditing a business continuity management BCM November, 2015 Auditing BCM Agenda 1. Introduction 2. Definitions 3. Standards 4. BCM key elements IT Governance class - IT audit program

More information

Best Practices in Disaster Recovery Planning and Testing

Best Practices in Disaster Recovery Planning and Testing Best Practices in Disaster Recovery Planning and Testing axcient.com 2015. Axcient, Inc. All Rights Reserved. 1 Best Practices in Disaster Recovery Planning and Testing Disaster Recovery plans are widely

More information

CISM Certified Information Security Manager

CISM Certified Information Security Manager CISM Certified Information Security Manager Firebrand Custom Designed Courseware Chapter 4 Information Security Incident Management Exam Relevance Ensure that the CISM candidate Establish an effective

More information

Developing a Business Continuity Plan... More Than Disaster

Developing a Business Continuity Plan... More Than Disaster Developing a Business Continuity Plan..... More Than Disaster Recovery! April 19, 2010 UHY / MMA Business Survival Series Webinar Focus.... Understanding the components of Business Continuity Planning

More information

BCP and DR. P K Patel AGM, MoF

BCP and DR. P K Patel AGM, MoF BCP and DR P K Patel AGM, MoF Key difference between BS 25999 and ISO 22301 ISO 22301 puts a much greater emphasis on setting the objectives, monitoring performance and metrics aligning BC to top management

More information

Clinic Business Continuity Plan Guidelines

Clinic Business Continuity Plan Guidelines Clinic Business Continuity Plan Guidelines Emergency notification contacts: Primary Role Name Address Home phone Mobile/Cell phone Business Continuity Plan Coordinator QSP Business Continuity Plan Coordinator

More information

Emergency Preparedness: Learning Objectives. Minimizing and Controlling Future Disasters. SHRM Disaster Preparedness Survey 3.

Emergency Preparedness: Learning Objectives. Minimizing and Controlling Future Disasters. SHRM Disaster Preparedness Survey 3. Emergency Preparedness: 1 Minimizing and Controlling Future Disasters October 7-8, 2013 Presenter: Marna Hayden, SPHR Hayden Resources Inc. www.haydenhr.com Learning Objectives How to develop emergency

More information

Business Continuity Planning. Donna Curran, Director Audit and Risk Management February, 2014

Business Continuity Planning. Donna Curran, Director Audit and Risk Management February, 2014 Business Continuity Planning Donna Curran, Director Audit and Risk Management February, 2014 Agenda Business Continuity Defined The Importance of a Plan Determining the Costs Business Impact Analysis MTO,

More information

Interactive-Network Disaster Recovery

Interactive-Network Disaster Recovery Interactive-Network Disaster Recovery BACKGROUND IT systems are vulnerable to a variety of disruptions, ranging from mild (e.g., short-term power outage, disk drive failure) to severe (e.g., terrorism,

More information

Business Continuity Plan

Business Continuity Plan Business Continuity Plan IMMEDIATE ACTIONS Manager/Supervisor 1. Ensure emergency services contacted 2. Ensure safety of personnel 3. Co-ordinate with the emergency services 4. Contact Senior members of

More information

Disaster Recovery. 1.1 Introduction. 1.2 Reasons for Disaster Recovery. EKAM Solutions Ltd Disaster Recovery

Disaster Recovery. 1.1 Introduction. 1.2 Reasons for Disaster Recovery. EKAM Solutions Ltd Disaster Recovery Disaster Recovery 1.1 Introduction Every day, there is the chance that some sort of business interruption, crisis, disaster, or emergency will occur. Anything that prevents access to key processes and

More information

The PNC Financial Services Group, Inc. Business Continuity Program

The PNC Financial Services Group, Inc. Business Continuity Program The PNC Financial Services Group, Inc. Business Continuity Program subsidiaries) 1 Content Overview A. Introduction Page 3 B. Governance Model Page 4 C. Program Components Page 4 Business Impact Analysis

More information

Chapter 1: An Overview of Emergency Preparedness and Business Continuity

Chapter 1: An Overview of Emergency Preparedness and Business Continuity Chapter 1: An Overview of Emergency Preparedness and Business Continuity After completing this chapter, students will be able to: Describe organization and facility stakeholder needs during and after emergencies.

More information

Table of Contents ESF-12-1 034-00-13

Table of Contents ESF-12-1 034-00-13 Table of Contents Primary Coordinating Agency... 2 Local Supporting Agencies... 2 State, Regional, and Federal Agencies and Organizations... 2 Purpose... 3 Situations and Assumptions... 4 Direction and

More information