BUSINESS CONTINUITY MANAGEMENT SINGAPORE SS540 BCM STANDARDS. LSA Consultants Pte Ltd

Transcription

1 BUSINESS CONTINUITY MANAGEMENT SINGAPORE SS540 BCM STANDARDS LSA Consultants Pte Ltd

2 BCM SINGAPORE

3 LSA Consultants Who are we? Business Continuity Management (BCM) What is it? Singapore Standard SS540 Business Continuity Management Introduction BCM The Benefits to Business BCM Implementation What is the Process? PRESE ENTATION OVERVIEW Integrating Existing Systems National BCM Programme Singapore Business Federation (SBF)

4 LSA Consultants About Us LSA Melbourne Australia & Singapore Incorporated Our Core Competencies: Security Risk Management Business Continuity Management Emergency Management Crisis Management Master Security Planning Supply Chain Security Management Major Event Security Management LSA C CONSULTAN NTS ABO OUT US Our Consultants & Locations: Singapore Melbourne Beijing Bali Dubai Shanghai Sydney Our Strategic Partners: AETOS Security Consulting Singapore Future Risk Sydney BCM Training Pacific Region INCON Dubai Global Asset Solutions Singapore Eduline Training & Consultancy Singapore Citadel International Beijing

5 Industry Projects BCM LSA Consultants & its Partners have extensive experience and a proven track record in providing BCM related advice to clients in a range of sizes and complexity, and in a variety of industries including: Government LSA IN N INDUSTR RY Finance & Banking Manufacturing Transport Logistics Port Terminals & Aviation Petrochemical & Mining Insurance Hospitality & Entertainment Information Technology Critical Infrastructure Power Food & Drug

6 Our Recent Achievements ISO Supply Chain Security Management Certification 1 st Chief Security Officer to achieve ISO28000 Certification Globally Leading Consultancy for ISO28000 Implementation Asia Pacific Region 1 st Client to achieve Region Head Office ISO28000 Certification 1 st Client to undergo ISO28000 implementation Jurong Island Facility Business Continuity Management OUR R RECENT AC CHIEVEMEN NTS Approved BCM Consultant to implement Singapore SS540 Standard Strategically aligned with Internationally recognised BCM Training Organisation Providing the NEW SS540 BCM Services to; Singapore Hotel Industry Singapore Transport Industry Solid base of BCM qualified Consultants & Professionals DRII & BCI

7 Business Continuity Management What is it? "Successful businesses plan for success." A business is only as successful as it's ability to continue to trade and operate in all circumstances. It's CRUCIAL for every organisation and business to plan in advance so they can continue to operate BCMdesignsan organisations abilityand and capabilityto to continue to operate and recover from a disruption to normal business operations. BCM puts plans in place to: Alert the Crisis Management Team to action; Effectively Respond to the Incident/ /Occurrence; Coordinate key organisation resources; Prioritise essential business functions during disruption; Communicate with staff, stakeholders and media; Recover from the disruption in a logical, systematic manner customised to that business; Minimise and manage risk to key assets; Mitigate loss to business, revenue, brand damage and reputation. BCM WHAT IS IT? Mandarin Hotel Beijing Fire February 2009 US$731m Damage

8 Business Continuity Management What is it? BCM Risk Management Emergency Management Plans Integrates with Organisations ERM System Utilises International Best Practice Risk Management Methodology Ensures effectiveness of Emergency Response & Recovery Plans Integrates EM Plans WHAT IS IT? Disaster Recovery Plans Builds in existing DR Plans IT & Critical Asset/ Infrastructure Recovery Crisis Management Plans Develops key management protocol & procedures during crisis Trains & exercises key management & staff to operate and lead effectively during a major incident Business Continuity Plans Develop a plan to ensure the continuity of operations during a threat to business whilst meeting company objectives Ensures effective Corporate, Media & Stakeholder communications Specifies resources & capabilities required to prepare, respond & recover from threats Testing & Exercising BCP plans are subject to regular tests & exercise Verifies committed resource adequacy, training, availability for effective & efficient recovery

9 Examples of Incidents that cause Disruption to Business Disruption to Business can occur through many Direct & In Direct means Whilst intentional Security Related incidents (Criminal/ Terrorism) feature in the BCM Landscape, many other serious disruptions are created through unintentional Accidental, Climatic or Environmental incidents and disasters An organisation may become a Proximity Victim from an un related external threat or incident EXAM MPLES OF IN NCIDENTS Direct Disruption Examples Indirect Disruption Examples Crime Fraud Terrorism Bomb Threat IT Failure Negative Media Brand Damage Fire Sabotage Power Outage Loss of Key Management Flooding Regulatory Non Compliance High Security Alert Industrial Action Pandemic Major Health Issue Political l Instability External Financial Crisis Heightened National Security Alert Adverse Evacuation Weather Proximity Conditions Threat Transport Disruptions

10 Singapore Standard SS540 Business Continuity Management New Standard for Singapore Launched October 2008 Based on similar International Standards BS25999; AS/NZ 221:2004 etc Applicable to all organisation regardless of size SS540 0 STANDA RD Implementation by Established & Tested Framework Provides the framework for entities to analyse and implement strategies, processes and procedures to address concerns for its survival against internal & external threats Emphasis on resilience and protection ofcritical assets: Human Physical Environmental Intangible Focuses on continuity management and the prompt recovery of business functions SINGAPORE STANDARD SS 540 : 2008 SINGAPORESTANDARD STANDARD FOR Business continuity management (BCM) The Standard adopts a process approach to establish, maintain and improve an organisations Preparedness; Response; Continuity Management System

11 SS540 Standards Objective for Compliance PDCA Methodology Plan Do Check Act Develop Policy for Programmes Prevention Preparedness Response Continuity Recovery SS540 0 OBJECTIV VES Achieve Policy Commitment Objectives Processes Procedures Assure Competency BCM Awareness Training Programmes Conformity & Compliance Demonstrate the Efforts to Conform with the Standard Continual Improvement Establish a Process to ensure Continual Improvement

12 Hospitality BCM Benefits to Business Mitigate Minimise Exposure to Unforseen Risks Stakeholder Confidence in your business partnership Regulatory Compliance may require it Growing Global Requirement for BCM in Uncertain Times BENEF FITS TO BU USINESS Upstream Downstream BCM Consistency Competitive Advantage More Attractive Business Option Excellent ttiming i Government tencouragement t& Incentives Differentiate from Competitors with Recognised Certification Effective Risk Management = Insurance Premium Reduction Faster Recovery Post Incident Minimise Loss Potential Aligns with Government Industry Standardisation Goals Become Government ttender Ready with BCM Compliance

13 BCM Implementation Examining BCM Gap Analysis Ongoing Process to Safeguard Reputation; Brand & Value Creating Activities Current Status vs Standards Compliance Policies; Processes; People; Infrastructure Review Existing DR; EM; Crisis Plans for effective Integration BCM IMPLEMEN NTATION Program Initiation & Management Constructing the BCM Framework Achieving Key Management Support Risk Evaluation & Control Identify Internal & External Risks in Context Develop Risk Mitigation Strategies & Controls Business Identify Time Identify Impacts Impact from Business Interruptions Analysis Critical Functions; Recovery Priorities; Recovery Time Objectives Business Leverage Outcomes from Risk Continuity Evaluation & Business Impact Strategies Analysis Establish Business Continuity Strategies

14 BCM Implementation 2 Emergency Response & Operations Business Continuity Plans Awareness & Training Programmes Identify Readiness to Respond to an Emergency in Coordinated & Effective Manner Design, Develop & Implement Organisation Specific BCP s Prepare Program to Create & Maintain Corporate BCM Awareness Develop Procedures for Initial Response Provide Continuity and/ or Recovery according to Business requirements Enhance Skills to Develop, Implement & Manage Business Continuity BCM IMPLEMEN NTATION 2 BCP Testing & Exercise BCM Programme Management Develop Exercise/ Testing Program to Plan Exercise Requirements Demonstrate Program to maintain Currency through Systematic Review Establish Maintenance & Audit Program to ensure Plans are Current & Relevant Re align and Reevaluate Plans on Continual Basis Compliance & Certification 3 rd Party Audit for Compliance Issue of Certification

15 Integrating Existing Systems Synergies do exist between BCM SS540 Standards and Existing Management Systems and Regulatory Standards For Example: Organisations can effectively utilise the Risk Assessment tprocess established in IS or ISO28000 and Comply with SS540 Compliance through 3 rd Party Audit can be more easily demonstrated if the organisation already adopts the Plan, Do, Check Act methodology for Continual Improvement. Enterprise Risk Management Business Continuity Management SS540 ISO9000 ISO14000 ISO28000 EH&S INTEG GRATING EX XISTING SYS STEMS Operating Changing Supporting Optimizing

16 National BCM Programme SBF MISSION: To encourage and enable more Singapore based companies and SME s to augment the robustness of their operation through the adoption of BCM VISION: BCM ready Singapore gp organisations that are resilient and capable of mounting effective Preventative, Response, Recovery and Restoration measures against natural or man made disruptions. NATIO ONAL BCM PROGRAM MME OBJECTIVE: Financially incentivize companies through Government grant program to implement standard and achieve BCM certification. Costs can be defrayed up to 70% for: Salary/ Training of staff involved in BCM certification project Costs for engaging 3 rd party consultant to support certification BCM Certification cost IT Hardware/ software needed to implement BCM

17 National BCM Programme Objectives PROG RAMME OBJECTIVES Raise Awareness of Importance of BCM Widen BCM Standard Implementation by Business Community Make BCM Resources More Accessible Support Enterprises Efforts to become BCM Certified

18 The Spring Singapore Funding Roadmap Approximate timeline for SME s Week 1 Week2 Week 3 Week 3 Week 9 Week 9 Submission of SME details to SBF Briefing to SME by LSA & SBF In principal confirmation of SME eligibility for funding by SBF Submission i of SME Funding application to SBF in consultation with LSA Approval of Funding by SBF / SPRING SME BCM SS 540 Project commencement END TO ENDSER RVICES PR ROVIDED BY LSA CO NSULTANTS S

19 OR CALL LSA CONSULTANTS TO ENQUIRE ABOUT THE SBF FUNDING & PROJECT IMPLEMENTATION PROCESS