22
Continuity and Resilience (CORE) ISO 22301 BCM Consulting Firm Presentations by speakers at the 1 st KSA Business & IT Resilience Summit 16 th Feb, 2017 at Four Seasons Hotel, Riyadh KSA Our Contact Details: INDIA UAE Continuity and Resilience Level 15,Eros Corporate Tower Nehru Place ,New Delhi-110019 Tel: +91 11 41055534/ +91 11 41613033 Fax: ++91 11 41055535 Email: [email protected] Continuity and Resilience P. O. Box 127557 Abu Dhabi, United Arab Emirates Mobile:+971 50 8460530 Tel: +971 2 8152831 Fax: +971 2 8152888 Email: [email protected]

Leading Change: Building Organisational Resilience

Embed Size (px)

Citation preview

Page 1: Leading Change: Building Organisational Resilience

Continuity and Resilience (CORE)

ISO 22301 BCM Consulting Firm

Presentations by speakers at the

1st KSA Business & IT Resilience Summit

16th Feb, 2017 at Four Seasons Hotel, Riyadh KSA

Our Contact Details:

INDIA UAE

Continuity and Resilience

Level 15,Eros Corporate Tower

Nehru Place ,New Delhi-110019

Tel: +91 11 41055534/ +91 11 41613033

Fax: ++91 11 41055535

Email: [email protected]

Continuity and Resilience

P. O. Box 127557

Abu Dhabi, United Arab Emirates

Mobile:+971 50 8460530

Tel: +971 2 8152831

Fax: +971 2 8152888

Email: [email protected]

Page 2: Leading Change: Building Organisational Resilience

Leading Change: Building Organisational Resilience

Page 3: Leading Change: Building Organisational Resilience

Page 3

Agenda

► What is Organizational Resilience?

► Why Should You Care?

► Are You Prepared?

► What Do You Need?

► Business Continuity Management

► Organizational Resilience

► A Call to Action

Page 4: Leading Change: Building Organisational Resilience

Page 4

What Is Organizational Resilience?

► Organizational Resilience is “the ability of

an organization to anticipate, prepare for, respond and

adapt to incremental change and sudden disruptions in

order to survive and prosper.”

► !

Page 5: Leading Change: Building Organisational Resilience

Page 5

Why Should You Care?

► DISASTERS REALLY DO HAPPEN

► There is always risk

► Threats are real

► Threat landscape changes

► The Key is PREPAREDNESS

► Incidents/ Disasters

► Natural: Floods, Fires, Earthquakes

► Manmade: Cyber attacks, IoT Eco-System, Bombs, System Failures, Building Collapse, Social Media

Page 6: Leading Change: Building Organisational Resilience

Page 6

Are You Prepared?

► If your organization had a disaster

right now, what would happen?

► What teams are trained to REACT,

RESPOND, and RECOVER to any

crisis, incident, or disaster?

► Who would do what?

► What group(s) have responsibility for

business continuity, risk management,

and/or organizational resilience?

► How are these groups working

together?

Page 7: Leading Change: Building Organisational Resilience

Page 7

What Do You Need?

►Let’s Talk - Business Continuity

Page 8: Leading Change: Building Organisational Resilience

Page 8

Respond vs. React

Page 9: Leading Change: Building Organisational Resilience

Page 9

Business Continuity – The Timeline

9

Emergency/

Crisis

Response Resume

Business

(Alternate

Site)

Vital

Records

Business Activity Backlog

Resume

Business

(Home

Site)

Systems & Applications Recovery Path

Business Unit Recovery Path

Telecommunications Recovery Path

Unplanned

Interruption

Operating

System

Restoration

Voice

Network

Restoration

Business

Unit

Relocation

Backlog/

Data Synch

Application

Restoration

Manual

Operations

Data

Network

Restoration

Standalone

System

Restoration

Backlog/

Data

Synch

► Business Activities

Page 10: Leading Change: Building Organisational Resilience

Page 10

-- Lines of Business Managers (Finance, Legal, etc.)

IT Disaster Recovery Plans

Life Safety and Security Plans

-Human Resources - Physical Security

-Information Security Crisis Communications

Crisis Management Plan

Business Process Recovery Plans

Four Types of Plans Needed

Tells all staff what

to do when specific

emergency events

happen

Identifies senior

management team’s

roles and actions

required to mitigate

the impact of crisis

Helps to ensure that

essential business processes

continue following a disaster,

determines the “who, where,

and when” of recovery

Focuses on the

recovery of IT

systems/networks/

telecom based on

business

requirements

Page 11: Leading Change: Building Organisational Resilience

Page 11

Crisis Communications Speed at Which Risk and Crisis Communication Information Flows Through the Media

• 20 years ago: 24 hours

• 10 years ago: 4 hours

• 2010: 4 minutes

• Can a crisis go viral in less than a minute via social media outlets?

Page 12: Leading Change: Building Organisational Resilience

Page 12

Business Continuity Management System

Understand

the organization

Exercise,

maintenance

and review

Determine

Recovery

strategies

Develop and

implement

Plans

Create BCM

Framework

and

Governance

Page 13: Leading Change: Building Organisational Resilience

Page 13

Let’s Talk - Managing Risks

Page 14: Leading Change: Building Organisational Resilience

Page 14

What Groups in Your Organization Manage Risk?

► Management

► Information Security

► Corporate / Physical Security

► Business Continuity

► Facilities / Real Estate

► Information Technology / Telecom

► Risk Management

► Audit

► Procurement

► Communications

► Legal/Compliance

► Operations/Business Units (e.g. Customer Service, HR)

► Project Management

14

►What’s Our Risk Appetite?

Page 15: Leading Change: Building Organisational Resilience

Page 15

Leading Change

Page 16: Leading Change: Building Organisational Resilience

Page 16

Build: Organizational Resilience Framework

► Gain Buy-In

► Scope Program – Governance Framework

► Identify / Integrate Initiatives

Across Organization

► Unify Resilience Activities

16

Page 17: Leading Change: Building Organisational Resilience

Page 17

Organizational Resilience Success Factors

17

Integration of Initiatives

Relationship Building

NETWORK!!!!

Page 18: Leading Change: Building Organisational Resilience

Page 18

These Factors Could Help You or Hurt You

18

• Current State

• Strategic Growth on

Horizon

• Business Culture

• Past Incidents/Disasters

• Organizational Change

• Resources

• Budget

• Changing Priorities

• Getting Results from

Others Not Under Your

Direct Control

Page 19: Leading Change: Building Organisational Resilience

Page 19

Leading Change - Success Factors

► Become an Agent of Change

► Where Should I Start?

► Gain Senior Management Buy-In

► BCP Teams and Plans

► Governance: Who, what, when, where and how?

► Benefits to all stakeholders What support/resources do you need?

► Do you have to sell it?

► Document Your Strategy / Game Plan

19

Page 20: Leading Change: Building Organisational Resilience

Page 20

Questions?

20

Page 21: Leading Change: Building Organisational Resilience

EY | Assurance | Tax | Transactions | Advisory

About EY

EY is a global leader in assurance, tax, transaction and advisory services.

The insights and quality services we deliver help build trust and confidence in

the capital markets and in economies the world over. We develop

outstanding leaders who team to deliver on our promises to all of our

stakeholders. In so doing, we play a critical role in building a better working

world for our people, for our clients and for our communities.

EY refers to the global organization, and may refer to one or more, of the

member firms of Ernst & Young Global Limited, each of which is a separate

legal entity. Ernst & Young Global Limited, a UK company limited by

guarantee, does not provide services to clients. For more information about

our organization, please visit ey.com.

The MENA practice of EY has been operating in the region since 1923. For

over 90 years, we have grown to over 5,000 people united across 20 offices

and 15 countries, sharing the same values and an unwavering commitment

to quality. As an organization, we continue to develop outstanding leaders

who deliver exceptional services to our clients and who contribute to our

communities. We are proud of our accomplishments over the years,

reaffirming our position as the largest and most established professional

services organization in the region.

© 2015 EYGM Limited.

All Rights Reserved.

ED None

This material has been prepared for general informational purposes only and

is not intended to be relied upon as accounting, tax, or other professional

advice. Please refer to your advisors for specific advice.

ey.com/mena

Page 22: Leading Change: Building Organisational Resilience

Continuity and Resilience (CORE)

ISO 22301 BCM Consulting Firm

Presentations by speakers at the

1st KSA Business & IT Resilience Summit

16th Feb, 2017 at Four Seasons Hotel, Riyadh KSA

Our Contact Details:

INDIA UAE

Continuity and Resilience

Level 15,Eros Corporate Tower

Nehru Place ,New Delhi-110019

Tel: +91 11 41055534/ +91 11 41613033

Fax: ++91 11 41055535

Email: [email protected]

Continuity and Resilience

P. O. Box 127557

Abu Dhabi, United Arab Emirates

Mobile:+971 50 8460530

Tel: +971 2 8152831

Fax: +971 2 8152888

Email: [email protected]