Business Continuity Planning

1. Business Continuity Planning April 29, 2005 Edmonton Sean Lawson, CBCP Linc Group Corp.

2. Resources • DRI Canada – www.dri.ca • Business Continuity Institute – www.thebci.org • Disaster Recovery Information Exchange - West (www.drie-west.org) • Disaster Recovery Journal – www.drj.org • Laye, John. Avoiding Disaster, 2002

3. Business Continuity Planning The process of developing advance arrangements and procedures that enable an organization to respond to an event in such a manner that critical business functions continue with planned levels of interruption or essential change. – DRI International SIMILAR TERMS: Contingency Planning, Disaster Recovery Planning, Business Resumption Planning, Continuity of Operations Planning.

4. BCP is about managing risk Stakeholders/ Customers Suppliers Legislation Operations Revenue Employees Market Forces Technology

5. BCP is about managing risk Stakeholders/ Customers Suppliers Legislation Operations Revenue Employees Market Forces Technology

6. Threats • Y2K • 9/11 terrorist attacks • Anthrax - Bio-terrorism • SARS • Power Black Out • Enoch gas well blow-out • Edmonton Floods • Avian Influenza (verge of a pandemic) • Direct and Indirect effects

7. Risks • Injury/deaths (staff, public, stakeholders) • Financial losses (revenue, cash flow) • Lost customers, suppliers, partners • Damaged reputation • Lost equipment, property, facilities • Legal liability

8. Frequency vs. Likelihood Source: Contingency Planning Research, Inc.

9. Costs of an Outage Source: Contingency Planning Research, Inc.

10. What if we’re not prepared • Consequences of a major business disruption in the absence of a BCP Plan: • only 43% of businesses without plans resume operations after a disabling disaster; of these, • only 12% are still in operation two years after a disabling disaster. Source: Contingency Planning Research, Inc.

11. BCP - Professional Practices • Project Initiation and Management • Risk Evaluation and Control • Business Impact Analysis • Developing Business Continuity Strategies • Emergency Response and Operations • Developing and Implementing Business Continuity Plans • Awareness and Training Programs • Maintaining and Exercising Business Continuity Plans • Public Relations and Crisis Communication • Coordination with Public Authorities

12. State of the BCP Industry • Growing trend toward standardization. • Formalized education and training • Certified practitioners • Standards and Legislation • PIPA • ISO 17799 • NFPA 1600 • Increasing social and corporate awareness. • Personal preparedness • Corporate responsibility • Business best practice

13. Fed/Prov/Local Activities • Federal • Emergencies Act, Emergency Preparedness Act • PSEPC (OCIPEP) • NERS • Provincial • Disaster Services Act and Regulations • GOA Planning and Coordination • EMA (and EPOs) • Departmental BCP • Municipal • Disaster Services Act and Regulations • Engaging community partners • Planning

14. BCP Benefits • BCP is a “best practice” for any organization • Resilient to minor and major events • Increased capacity to meet operational surges • Clarifies priorities • Engages employees and builds confidence • Immediate value • Understand your organization • Identifying synergies within your operations • Identify threats • Feed priorities into strategic planning

15. What to do next? • Get affiliated. • Get certified. • Get planning.

16. Sean Lawson, CBCP Linc Group Corporation sean.lawson@attglobal.net 780-964-1049