Business Continuity & Disaster Recovery

Transcription

1 Business Continuity & Disaster Recovery Safety First Quality Every Time 1

2 Business Continuity & Disaster Recovery Planning Who here has a formal Business Continuity & Disaster Recovery plan? The purpose of Business Continuity is to maintain a minimum level of business operations to ensure continuous supply to our customers. The purpose of Disaster Recovery Planning is to ensure we have the tools, approach and support infrastructure in place to fully [or partially] restore the operation to business as usual quickly. Safety First Quality Every Time 2

3 Business Continuity & Disaster Recovery Planning Why do you need one? Minimize any negative impact to customer operations Identify critical systems and procedures (e.g. IT) Back up systems, ensure peace of mind that ALL critical systems and procedures will be backed up and online as quickly as possible Minimize risk of delays Prioritize recovery time and objectives Document critical information and minimize decision making during a disaster Plan for extended downtime and getting back to normal Safety First Quality Every Time 3

4 Business Continuity & Disaster Recovery Planning What Is NFPA 1600? Evolved from Public Law The National Commission on Terrorist Attacks Upon the United States (the 9/11 Commission), recognized NFPA 1600 as our National Preparedness Standard Widely used by public, not-for-profit, nongovernmental, and private entities on a local, regional, national, international and global basis. The NFPA 1600 has been adopted by the U.S. Department of Homeland Security as a voluntary consensus standard for emergency preparedness. What does NFPA 1600 address? Provisions cover the development, implementation, assessment, and maintenance of programs for prevention, mitigation, preparedness, response, continuity, and recovery. Safety First Quality Every Time 4

5 Production Facilities and Personnel actions Notification Plan with details for immediate and ongoing internal and external communications Immediate protection of Facilities and Assets Continuing Security and Maintenance of Plant and Personnel Protection of Customer and Supplier property Transfer and transition of manufacturing to alternate facilities (as appropriate) Alternate sources for energy, communications, and utilities Technology recovery plan Preservation/recovery of BOMs, drawings, work instructions, and other vital production documents 5

6 Supply Base Risk Mitigation Program Supplier BCP Communications Plan from your suppliers Securing Specifications/BOM/Order details ERP Maintenance of supply activities and delivery chain Customer Related Actions Notification and ongoing Communications Plan to address supply continuity Other specific information related to continuing business operations. 6

7 Business Imperatives Do you know which your key business objectives are; those outcomes that would cause severe long-term damage to your organization if they failed? Can you quantify the extent to which failure of key business objectives would damage your business, in financial and other terms? If your key business objectives fail, do you know how quickly they would need to be restored to avoid long-term damage? 7

8 Mission Critical Activities Have you identified which business activities your key objectives depend upon; directly or indirectly? Do you understand the nature of the interdependencies between these mission critical activities (MCAs)? Do you know which of your MCAs are dependent upon the continuing ability of 3 rd parties to provide you with goods, materials or services? 8

9 Threats and Vulnerabilities Do you understand the spectrum of risks and threats, both internal and external to the organization, which could disrupt your key business objectives? Are there any specific threats that have a greater probability of occurring due to the location, environment or nature of your business? Do you understand how vulnerable your MCAs are to these specific and generic threats? Have you identified all the potential single-point-offailure vulnerabilities? 9