Business Intelligence & Business Continuity BCM Maturity Curve April 22, 2013 COOP Systems Briefing 2 Chris Alvord, CEO, COOP Systems CBCP, MBCI, Former DRII Certified Trainer OCEG GRC, ISO 22301 Lead Auditor Why Business Intelligence and Business Continuity Technology - - CIO priorities ISO Standards - - as defined by ISO 22301 Business Intelligence - - defined BCM Data - - excellent for analysis Examples Several other industries BCMS BI Dashboard Outline COOP Systems Briefing 3 Technology Priorities - - CIOs 2012 2008 #1 BI BI & Analytics #1 #2 Mobile #2 #3 Cloud #3 #4 Collaboration #4 * Gartner, 2012 CIO Survey COOP Systems Briefing 4
Technology Priorities - - BI ISO Standards - - Program Mgt COOP Systems Briefing 5 COOP Systems Briefing 6 Interested Parties Requirements for Business Continuity ISO Standards - - ISO 22301 Maintain and Improve (Act) Continual Improvement of BCMS Establish (Plan) Monitor and Review (Check) Implement and Operate (Do) PDCA model applied to BCMS processes Interested Parties Managed Business Continuity 1 Scope ISO Standards - - Two Focus Areas 2 Normative references 3 Terms and definitions 4 Context of the organization 5 Leadership 6 Planning 7 Support 8 Operation (8.2 BIA/Risk) 9 Performance Evaluation 10 Improvement (10.2 Continual Improvement) COOP Systems Briefing 7 COOP Systems Briefing 8
ISO Standards - - 8.2.1 BIA/Risk ISO Standards - - 8.2.2 BIA Organization shall establish, implement, maintain formal documented process for BIA and risk assessment that establishes the context of the assessment, defines criteria and evaluates the potential impact of a disruptive incident, takes into account legal and other requirements to which the organization subscribes, Includes systematic analysis, prioritization of risk treatments, and their related costs. Defines required output from the BIA risk assessment, and Specifies to be kept up-to-date, confidential. Organization shall establish, implement, and maintain a formal and documented evaluation process for determining continuity and recovery priorities, objectives and targets. This process shall include assessing the impacts of disrupting services. Business impact analysis shall include following: Identifying activities supporting provision of products/services; Assessing the impacts over time of not performing these activities; Setting prioritized timeframes for resuming these activities at a specified minimum acceptable level, taking into consideration the time within which the impacts of not resuming them would become unacceptable; and Identifying dependencies and supporting resources for these activities, including suppliers, outsource partners and other relevant interested parties. COOP Systems Briefing 9 COOP Systems Briefing 10 ISO Standards - - 10 Improvement 10.1 Nonconformity and corrective action 10.2 Continual improvement The organization shall continually improve the suitability, adequacy or effectiveness of the BCMS. NOTE: The organization can use the processes of the BCMS such as leadership, planning and performance evaluation, to achieve improvement. Brief Definitions - - BI Definition - - convert information into knowledge Goal - - better decision-making Support - - common business processes Measurement - - hierarchy of performance metrics and benchmarking Analytics - - building quantitative processes for decision-making Management Reporting - - e. g., data visualization, executive information Collaboration - - gather information from different inside/outside areas Knowledge Mgt - - identify, create, represent, distribute, enable adoption COOP Systems Briefing 11 COOP Systems Briefing 12
Example Resource Tables BIA Results Risk Assessment Employees Processes Software Hardware Facilities Vendors Contacts Applications IR Check List Communications Vital Records Government Health Care Manufacturing Software Human Resources Hospital Metrics BI Dashboard Examples Banking 13 COOP Systems Briefing COOP Systems Briefing 14 Government Dashboard* Health Care Dashboard 15 COOP Systems Briefing COOP Systems Briefing 16
Manufacturing Dashboard Software Dashboard COOP Systems Briefing 17 COOP Systems Briefing 18 Human Resources Dashboard Human Resources Dashboard COOP Systems Briefing 19 COOP Systems Briefing 20
Hospital Metrics Dashboard Banking Dashboard COOP Systems Briefing 21 COOP Systems Briefing 22 BCMS BI Dashboard - - Specification Due Dates XY Axis Comparison Summary BCMS programs store valuable data of many types Sort of a small data warehouse High/Normal Status Program Status A BI capability with access to that data has great value Embedded BI makes sense for BCMS Somewhat less functionality than corporate BI systems is a given Lower cost, ease of use and flexibility is a good tradeoff Will also improve the program, per ISO 22301 COOP Systems Briefing 23 COOP Systems Briefing 24