120 likes | 261 Views
Implementing BCM. Lynda McMullan CBCI Business Continuity Manager. BCM - What, When, Who and How?. What is a Business Continuity Management Programme What are the elements of a BCM Programme When should each element of a BCM be created? Who should undertake the BCM Programme?
E N D
Implementing BCM Lynda McMullan CBCI Business Continuity Manager
BCM - What, When, Who and How? What is a Business Continuity Management Programme What are the elements of a BCM Programme When should each element of a BCM be created? Who should undertake the BCM Programme? How can BCM be embedded into an organisation?
What is BCM? BCI Good Practice Guides & BS25999 Holistic management process that identifies potential threats to an organisation and the impacts to business operations that those threats, if realized, might cause and which provides a framework for building organizational resilience with the capability for an effective response that safeguards the interests of its stakeholders, reputation, brand and value-creating activities
Business Continuity is the strategic and tactical capability of the organization to plan for and to respond to incidents and business disruptions in order to continue business operations at an acceptable pre-defined level. BS25999
What are the elements of a BCM Programme? BC Policy – identifies the organisations definition of BCM / sets out the scope and governance of the BCM programme / documents an operational framework for management / documents BCM principles / implementation and maintenance plan for the policy. BC Strategy – agreement on the delivery of the BCM Programme Prioritisation Exercise – to determine critical tasks/services Business Impact Analysis (BIA) / Business Impact and Risk Analysis (BIRA) Business Continuity Plan (BCP) Risk Register and Risk Plan BCM Programme Plan Project Plan Exercise and Review Plan
Whenshould each BCM element be created? Policy & Strategy before start of programme! BCM Programme Plan Initial Prioritisation BIRA / BIA BCPs & Risk Plans/Register Exercise and Review Programme
Identified Plan Owners Senior Management All staff where applicable Who should undertake the BCM Programme?
Evacuation Planning Estates & Facilities Business Process Re-engineering (BPR) Value For Money (VFM) Been seen as an enabler not a constraint How can BCM be embedded into an organisation?
BCI – Good Practice Guides BSI – BS25999 Legislation / Regulations H & S Requirements Organisations Strategic Plans Daily/weekly Business Impacts Aids?
Latest point of invocation Incident RTO MTPD Activity 3 Thinking Time Activity 2 Travel Set-up Time Activity 1 Incident Response Business Continuity Business Unit Recovery – back-to-normal Minutes to days Minutes to hours Weeks to months Damage repair or replacement / relocation to permanent place of work / Recovery of costs from insurers
Initial Prioritisation Exercise Incident Management Plan Business Impact Analysis Business Impact & Risk Analysis Members Communications Alt Locations Staff, Student & Visitor Welfare Evacuation Plans Call Out Co-ordination of BC Plans Salvage Plans Business Continuity Plan Exercise & Reviews Risk All non critical areas are planned for utilising a Business Unit Recovery Plan