Implementing BCM

Lynda McMullan CBCI

Business Continuity Manager

BCM - What, When, Who and How?

What is a Business Continuity Management Programme

What are the elements of a BCM Programme

When should each element of a BCM be created?

Who should undertake the BCM Programme?

How can BCM be embedded into an organisation?

BCI Good Practice Guides & BS25999

Holistic management process that identifies potential threats to an organisation and the impacts to business operations that those threats, if realized, might cause and which provides a framework for building organizational resilience with the capability for an effective response that safeguards the interests of its stakeholders, reputation, brand and value-creating activities

What is BCM?

Business Continuity is the strategic and tactical capability of the organization to plan for and to respond to incidents and

business disruptions in order to continue business operations at an acceptable

pre-defined level. BS25999

What are the elements of a BCM Programme?

BC Policy – identifies the organisations definition of BCM / sets out the scope and governance of the BCM programme / documents an operational framework for management / documents BCM principles / implementation and maintenance plan for the policy.

BC Strategy – agreement on the delivery of the BCM Programme

Prioritisation Exercise – to determine critical tasks/services

Business Impact Analysis (BIA) / Business Impact and Risk Analysis (BIRA)

Business Continuity Plan (BCP)

Risk Register and Risk Plan

BCM Programme Plan Project Plan

Exercise and Review Plan

When should each BCM element be created?

Policy & Strategy before start of programme!

BCM Programme Plan

Initial Prioritisation

BIRA / BIA

BCPs & Risk Plans/Register

Exercise and Review Programme

Who should undertake the BCM Programme?

Identified Plan OwnersSenior Management

All staff where applicable

How can BCM be embedded into an organisation?

Evacuation Planning

Estates & Facilities

Business Process Re-engineering (BPR)

Value For Money (VFM)

Been seen as an enabler not a constraint

Aids?

BCI – Good Practice Guides

BSI – BS25999

Legislation / Regulations

H & S Requirements

Organisations Strategic Plans

Daily/weekly Business Impacts

Incident

Set-up TimeTravelThinking

Time

MTPDRTO

Activity 1

Activity 3

Activity 2

Incident Response

Minutes to hours

Business Continuity

Minutes to days

Business Unit Recovery – back-to-normal

Weeks to monthsDamage repair or replacement / relocation to

permanent place of work / Recovery of costs from insurers

Latest point of invocation

Incident Management Plan

Members

Communications

Alt Locations

Staff, Student & Visitor Welfare

Evacuation Plans

Call Out

Co-ordination of BC Plans

Salvage Plans

All non critical areas are planned for utilising a

Business Unit Recovery Plan

Initial Prioritisation Exercise

Business Impact & Risk Analysis

Business Impact Analysis

Business Continuity Plan

Exercise & Reviews Risk

Questions?