Megan Patterson

7/31/2019 Megan Patterson

1/16

Testing your organisationTesting your organisationss

readinessreadiness

Running an emergencyexercise


2/16

Business Continuity LifecycleBusiness Continuity Lifecycle

Developyourplan

Imple

mentyo

urplan

Maintainyourp

lan

Know

yourb

usiness

Communicate

E

xercise

Maintain

Audit


3/16

RelationshipsRelationships

BIABIA BCPBCP -- ExercisingExercising

BCPBCP

TestingTesting

TestTest

PlanPlanBIABIA

TestTestReportReport

Review &Approval

Review &Approval

Review &Approval

Approval of test plans should be sought as adisruption to business as usual will occur.

All resources identified in the BIA should be assessed fornecessity in business continuity mode and should berecorded in the BCP.

A test plan should capture all resources and wherenecessary, RTOs & RPOs identified through the BIA andBC modes and test the accuracy and availability of each.

A BIA analyses the resources required to perform aprocess; that is: IT Applications, people, suppliers,

location, interdependencies, telephony etc

Test reports record necessary amendments and possibleprocess improvements.


4/16

Set the scene

Preparing a test planPreparing a test plan

Testing

Test PlanDesktopScenario

PartialLive

Scenario

LiveScenario

Identified resourcesfrom BIA and BC mode

Whose going totest the BCP?

When is the testto be conducted?

Define how and whatyou are going to test

Will it be a:

What will be included:

Review &Approval


5/16

The BCP Test ReportThe BCP Test Report

TestReport

DesktopScenario

PartialLive

Scenario

LiveScenario

Outcomes of the exercise

Confirms the type of test conducted:

What was included:

The scene

Identified resources

exercised

Who tested theBCP?

When was the test

conducted?

containsThe outcomes:

Review &

Approval

Alternate contingencymeasures

Process modification /improvement

Plan accuracy

Identified actions /amendments


6/16

ExercisingExercising

Accurate data

CollaborationStrongStrong

organisationorganisationresilienceresilienceShared

knowledge

Planning and Preparedness

Predefineddecisions

Anticipate

contributesto

Experience

Processimprovement

Adaptability

Education Innovation

Understanding


7/16

Exercising at State WaterExercising at State Water


8/16

State Water OverviewState Water Overview

New South Wales rural bulk water delivery business.

Driving economic success, sustains prosperous regional communities, andenriches the nation.

Maintains and operates major infrastructure to deliver bulk water toapproximately 6,300 licensed water users on the states regulated rivers.

Delivers a total annual average of approximately 4,600 gigalitres.

A state-owned corporation.

An asset portfolio of $3.5 billion.

In the process of upgrading seven dams across the state, injecting more

than a quarter of a billion dollars into regional community infrastructureover the next five years.


9/16

Exercising State WaterExercising State Water

Desktop exercises to walk throughand familiarise teams with new BCPs

Validate information:key contacts

key employees

required resources and RTOs and RPOs

loss of resource response proceduresmanual workarounds


10/16

Scenario buildingScenario building

Critical processes

Use realistic scenarios Understand the business unit Understand interdependencies

Examine process weaknesses Loss of key IT applications and networks Loss of key employees Natural disasters or frequency of the process

Management approval

Participation in exercise approval of scenario


11/16

Preparing an exercisePreparing an exercise

Pre - exercise preparation: Arrange a facilitator/observer, if necessary? Allow plenty of time for the exercise Depending on the type of exercise, ensure all key employees /

recipients / suppliers / dependents of the process are available forthe exercise

Prepare copies of the BCP and Test Plan for participant along withpens and markers

What do participants need to bring with them? Is it a walk through of the plan or a pull up stumps and go

type exercise? Are recovery resources available to enable a pull up stumps and

go exercise? Ensure participants understand the aim of the exercise

Provide guidance when needed Allow time for breaks Butchers paper, pens, markers, sticky notes


12/16

Conducting an exerciseConducting an exercise

Welcome

Provide background on the BC Program.

What it is?

Why it is? How will the day be conducted?

Assign roles where necessary

Encourage discussion

Document points for review, decisions andamendments


13/16

Benefits of participationBenefits of participation

A Resilient organisationA Resilient organisation

Improved planning and preparedness

Increased responsiveness

Ability to maintain an acceptable level of service A new eyes approach to risk

Increased understanding

Knowledge exchange

Acceptance of the BCM program

Enhances the learning organisation philosophy

Process enhancements


14/16

Other benefitsOther benefits

Clarification getting people on thesame page

Credible scenarios means a realistic,eye opening experience whichenables invaluable contributions fromplayers


15/16

Analysing resultsAnalysing results

Validates required actions in aresponse situation

Identify process enhancement

Highlight shortfalls in the process

Adds value to the BCP

Amendment where necessary

Future guidance for management


16/16

NextNext

Annual review of process

Incorporate results of exercise into

BCP

Perform live scenario with relocation

Documents

Megan Patterson