Thursday, May 9, 2013

Business Continuity Management and Planning - The Key Processes

In order to implement and continually improve a proper Business Continuity Management Program, the following program attributes and processes are essential:

Structure & Policy

Business+Continuity+Management+and+Planning+-+The+Key+Processes
Business Continuity Management and Planning - The Key Processes

All organizations should maintain a management structure that has clear and documented roles and responsibilities. The structure should support the development of a program that's aligned towards the organizations Business Continuity Management Policy.

A common structure incorporates a Sponsor, a Business Continuity Manager, along with a Crisis Management Team that contains members in the organizations Senior Management.

Business Impact Analysis (BIA's)

BIA's should be conducted on all with the organizations business units or areas. This analysis will determine the degree of planning that is necessary for each identified critical function, at exactly the same time as define the most period of your time the business can tolerate the critical function not being performed. The BIA will provide the cost / impact justification required to offer the implementation with the various continuity strategies.

Threat and Risk Assessment

The organization should undergo formal risk assessments of both Physical and Operational Risks on an on-going basis. Once identified, potential risk points are being assessed for either mitigation or acceptance. Acceptance of risk points should occur with the Senior Executive level.

Continuity Strategies

Strategies needs to be developed which reflect certain requirements identified in the BIA's. Strategies are to become reviewed by using an on-going basis to ensure they continue to keep effective in light of changing business requirements.

Business Continuity Plans

Plans are being developed, documented and maintained to make sure that business continuity strategies can be readily actioned. The plans will be to let the resumption of critical business functions with an alternate location(s) within agreed time periods.

Testing & Exercising, Maintenance and Audit

Ongoing testing with the contingency capability ought to be carried in order to prove its overall fitness for purpose as defined with the BIA process, also as to identify errors and issues with existing plans, documentation, and procedures. It is usually accepted that a BCP ought to be tested at the very least annually.

Activate and Execution

The recovery capability is being maintained in a very constant state of readiness in order to provide the very best possible ways of recovering from your catastrophic incident affecting any of the organizations locations.

0 comments: