Business Continuity Management Toolkit
Published on 23. December 2009
Book
Paperback/Softback
179 pages
978-1-906355-75-3 (ISBN)
Description
If half your staff couldn't make it into work today, this week or even this month, could your department cope? Business continuity will never be the most fashionable item on your organisation's agenda. When the risks seem remote and the costs seem high - effective disaster recovery planning can fall by the wayside. But as the recent swine flu pandemic has demonstrated, disruption is never far away. Managing Partner's new Business Continuity Management Toolkit is a complete step-by-step guide to implementing a robust business continuity management (BCM) framework for your organisation. It will arm you with cost effective methods that will save time, increase efficiency and dramatically improve the response of your organisation should the worst happen.
The report will show you * How to analyse the threats to your own organisation and asses the risk; * Who should be involved in the strategy and process; * What tools are needed and how they should be deployed; * How to sell your business continuity strategy to key decision makers; and * How an effective BCM structure can not only improve your performance in a crisis, but satisfy regulatory requirements, your clients' needs and drive down your operational losses. The report will help you build your own BCM framework by guiding you through five key phases - ensuring that each phase is linked to the relevant BS25999-2 industry standard and to the BCI Good Practice Guide: Phase 1: Project Management and Initiation; Phase 2: Understanding the organisation - BIA and Risk Analysis; Phase 3: Practical implementation begins - development of strategies and plans; Phase 4: Exercising your BCM processes; and Phase 5: Maintaining and reviewing your BCM processes; As well as examining these key phases, essential project management and communication skills are covered to ensure that your business continuity management strategy is a success.
Featuring practical examples ranging from large scale disasters to smaller organisational hiccups such as postal strikes and power cuts - along with useful forms and templates to support the key points discussed - so you can put this critical guidance into practice immediately. The report comes with a complimentary CD containing all the forms, templates and frameworks to work from, including: A stakeholder analysis; An example of a mission statement; An example of a BCM policy statement; A risk register; Threat impact mapping; An example of a crisis management plan; A crisis management methodology; Invocation documents; A meeting agenda sheet; A contacts sheet; A disaster recovery plan; An action plan to return to BAU (Business As Usual); and A crisis matrix
The report will show you * How to analyse the threats to your own organisation and asses the risk; * Who should be involved in the strategy and process; * What tools are needed and how they should be deployed; * How to sell your business continuity strategy to key decision makers; and * How an effective BCM structure can not only improve your performance in a crisis, but satisfy regulatory requirements, your clients' needs and drive down your operational losses. The report will help you build your own BCM framework by guiding you through five key phases - ensuring that each phase is linked to the relevant BS25999-2 industry standard and to the BCI Good Practice Guide: Phase 1: Project Management and Initiation; Phase 2: Understanding the organisation - BIA and Risk Analysis; Phase 3: Practical implementation begins - development of strategies and plans; Phase 4: Exercising your BCM processes; and Phase 5: Maintaining and reviewing your BCM processes; As well as examining these key phases, essential project management and communication skills are covered to ensure that your business continuity management strategy is a success.
Featuring practical examples ranging from large scale disasters to smaller organisational hiccups such as postal strikes and power cuts - along with useful forms and templates to support the key points discussed - so you can put this critical guidance into practice immediately. The report comes with a complimentary CD containing all the forms, templates and frameworks to work from, including: A stakeholder analysis; An example of a mission statement; An example of a BCM policy statement; A risk register; Threat impact mapping; An example of a crisis management plan; A crisis management methodology; Invocation documents; A meeting agenda sheet; A contacts sheet; A disaster recovery plan; An action plan to return to BAU (Business As Usual); and A crisis matrix
More details
Language
English
Place of publication
United Kingdom
Publishing group
Globe Law and Business Ltd
Target group
Professional and scholarly
Illustrations
Illustrations
ISBN-13
978-1-906355-75-3 (9781906355753)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Person
GARY HIBBERD has been working as the risk and business continuity manager for Irwin Mitchell Solicitors LLP, a top 20 law firm in the UK, for the past 18 months, but has over ten years' experience in business continuity management. Prior to joining Irwin Mitchell, he held the position of UK business continuity manager and European crisis management leader for GE Money, Europe. He helped to develop global strategies on business continuity, often travelling throughout Europe, America and Australia to demonstrate how to implement tools used to embed business continuity management in the organisation. With a background in IT and information security, Gary's experience is derived from practical application of the strategies he helps organisations develop. With a keen eye for what works and what does not, he approaches every new challenge with enthusiasm and a belief that a single positive act can make a difference.
Content
PART ONE - Introduction Chapter 1: Why does an organisation need a BCM framework? The role of the business continuity manager Should your organisation employ a full-time BCM practitioner? What makes a good BCM practitioner? The vital ingredient for success in BCM Reasons for implementing a BCM framework It could be you. Chapter 2: The definition of BCM What is BCM? The components of BCM Where is BCM's place in an organisation? Budgeting for BCM The BCM project cycle Project timeline Do I need special software to implement a BCM strategy? Chapter 3: The BCM standards Which Standards should I follow - BS25999-2 or BCI GPG? The life cycle of BCM. Chapter 4: The BCMS framework Creating your BCMS Policy, strategies, Terms of Reference (ToR), procedures and guidelines. PART TWO - The Five Key Phases of Implementing a BCM Strategy Phase 1: Project and Initiation Chapter 1: The project management process Communication - integral to effective BCM Tips for gaining support for your BCM project. Chapter 2: Project definition Scope and objective Critical Success Factors Resource requirements Timelines Major milestones Deliverables. Chapter 3: Organisational buy in BCM steering committee Selling BCM to stakeholders Selling business continuity to senior managers Stakeholder analysis Your vision Establish why you're doing this Establish the goals of your line manager, your function and your business Write your own 'Mission Statement.' Chapter 4: The BCM policy What should the policy contain? Policy development Policy example Step one - What the policy should state Step two - BCM steering group review Step three - Publish. Chapter 5: The BCM strategy Strategy development Understanding the customer. Chapter 6: The BCM charter What the charter should contain Roles and responsibilities of the EMT Taking the business with you on the BCM journey. Phase 2: Understanding the Organisation Chapter 1: The BIA and RAt - Critical components of a BCP The BIA and RA The BIA Components of the BIA Dependencies Recovery requirements What's next? RA What is risk? The final analysis. Chapter 2: The development of recovery strategies What is a fit-for-purpose incident response structure? What is the ICS? What should my ICS look like? Who should be part of the team and the structure? Reaction experiment - The Smoke Filled Room How do I determine how we will recover each critical activity within its RTO? What do I do with this information? Phase 3: Practical Implementation Begins Chapter 1: Implementing your BCM strategy Crisis management, BCP and DR What makes a good plan? One plan or more? Chapter 2: Crisis management plans What does a CMP look like? Reaching the CMT How is the CMT invoked? Invoking the CMT in practice Command centres The author's experience Management of the crisis An example of a CMP Management of the incident. Chapter 3: Responsibilities and actions Recovery focus Contacting people Invoking DR Recovery sites. Chapter 4: Other CMPs Media CMPs Reputational risk The Lockerbie disaster. Chapter 5: Business continuity plans How many plans do I need and what size should they be? Creation of the BCP Invoking the BCP Plan scenarios The detail Business Recovery Team (BRT) Loss of people Loss of site (also known as denial of access) Loss of systems/technology Loss of providers Returning to BAU Useful information (also known as the 'Appendix') Pandemic plans. Chapter 6: Disaster recovery plans Mission-critical and/or business critical services Meeting with IT Who should complete the DR plans? What does the DR plan look like? The disaster recovery strategy Post-disaster recovery Post incident review Crisis management, business continuity and disaster plan sign off Post Incident Reviews (PIR) and Root Cause Analysis (RCA) BCPs and incident management plans Phase 4: Maintaining your BCP Chapter 1: Exercising your BCP How do we exercise BCPs? Where do we begin? The scope The types of exercises The story of a hero. Chapter 2: Maintaining and reviewing your BCM processes The reviewing of BCM arrangements Auditing Example of an index in the annual report. Phase 5: Embedding BCM in the Organisation Chapter 1: Achieving organisational buy in Preventative and corrective actions The BCM awareness strategy What do people know about BCM currently? How do I deliver my awareness? Tools Afterword Appendix Index