150 likes | 323 Views
Business Continuity Planning Hertfordshire CIOB Fraser Gregory CMIOSH, MIIRSM, RMaPS, AIEMA. Why should you have Business Continuity Management?. Business Continuity Management forms an important element of good business management, service provision and entrepreneurial prudence.
E N D
Business Continuity Planning Hertfordshire CIOB Fraser Gregory CMIOSH, MIIRSM, RMaPS, AIEMA
Why should you have Business Continuity Management? Business Continuity Management forms an important element of good business management, service provision and entrepreneurial prudence. All business activity is subject to disruptions, such as technology failure, flooding, utility disruption and terrorism. Business Continuity Management provides the capability to adequately react to operational disruptions while protecting welfare and safety. Business Continuity Management ought now be regarded, not as a costly planning process, but as one that adds value to the organisation.
The benefits of an effective Business Continuity Management Programme • It’s able to proactively identify the impacts of an operational disruption; • Has in place an effective response to disruptions which minimises the impact on the organisation; • Encourages cross-team working; • Is able to demonstrate a credible response through a process of exercising;
The outcomes of an effective Business Continuity Management Programme • Key services are identified and protected, ensuring their continuity; • An incident management capability is enabled to provide an effective response; • The business understands itself and its relationships with other organisations, relevant regulators, government departments and the emergency services are properly developed, documented and understood;
The outcomes of an effective Business Continuity Management Programme • Staff are trained to respond effectively to an incident or disruption through appropriate exercising; • Staff receive adequate support and communications in the event of a disruption; • The business reputation is protected; and • The business remains compliant with its legal and regulatory obligations.
Main Features of Business Continuity Management In very simple terms, BCM involves us carrying out: • Business Impact Analysis • Identify processes, functions and activities that are critical to your business. • Identify the key internal and external dependencies on which these rely, e.g. ICT, facilities, staffing, specialists, partnerships, suppliers, utilities, fund providers. • Assess how long we can continue without these critical elements in the event of some disruption for whatever reason. (NB fire, flood, power cut (outage), pandemic ‘flu attack, plague of insects/vermin, terrorist action, etc. Identify the impact on the business.
Main Features of Business Continuity Management • Risk Analysis • Assess the likelihood of threats, both internal and external, to the critical business, the vulnerability of your critical areas of activity and the risk of disruption. • Business Continuity Planning • Consider options both institutionally and locally so that, if the worst were to happen, business could continue normally or near to normal, depending on the resources we can commit and our ability to act. • Recognise that your success in handling a crisis will be judged both on the technical response and our competence and capability in delivering the business response. • Prepare and test continuity plans.
Main Features of Business Continuity Management • Crisis Management/Emergency Response/Incident Management • Keep under review the composition and functioning of the Incident Management Team and local incident management. • Train staff for their roles at local and institutional levels. • 5. Disaster Recovery • Establish a recovery team. • Implement solutions outlined in the Business Continuity Plan(s).
Understanding the Organisation Provides information that enables prioritisation of the business services and urgency of the activities that are required to deliver them. This sets the requirements that will determine the selection of appropriate Business Continuity strategies.
Determining Business Continuity Strategy This enables a range of strategies to be evaluated and allows an appropriate response to be chosen for each service, such that the business can continue to deliver those services: at an acceptable level of operation; and within an acceptable timeframe
Developing and Implementing a Business Continuity Response This results in the creation of a management framework and a structure of incident management, business continuity and business recovery plans that detail the steps to be taken during and after an incident to maintain or restore operations.
Business Continuity Management Exercising, Maintaining and Reviewing Business Continuity Management exercising, maintenance review and audit leads to the Scottish Whiskey Association being able to: demonstrate the extent to which its strategies and plans are complete, current and accurate; and identify opportunities for improvement.
Embedding Business Continuity Management Embedding Business Continuity Management into the business culture enables Business Continuity to become part of the organisation’s core values and installs confidence in all stakeholders in the ability of the business to cope with disruptions.