Project Initiation &
Management
Risk Evaluation & Control
Business Impact Analysis
Developing Business Continuity
Strategies
Emergency Response & Operations
Developing & Implementing Business
Continuity Plans
Awareness & Training Programmes
Maintaining & Exercising Business
Continuity Plans
Public Relations & Crisis
Co-ordination
Co-ordination with Public Authorities
PROJECT INITIATION AND MANAGEMENT
To establish the need for
a Business Continuity Plan (BCP), including obtaining
management support and organising and managing the project
to completion within agreed time and budget limits.
The professional's role is to:-
- Lead sponsors in defining
objectives, policies and critical success factors
- Co-ordinate and organise /
manage the project
- Present (Sell) the project to
management and staff
- Develop project plan and
budget
- Define and recommend project
structure and management
- Manage the process
TOP
RISK
EVALUATION AND CONTROL
To determine the events and
environmental surroundings that can adversely affect the
organisation and its facilities with disruption as well as
disaster, the damage such events can cause, and the controls
needed to prevent or minimise the effects of potential loss.
Provide cost-benefit analysis to justify investment in
controls to mitigate risks.
The professional's role is to:-
- Understand the function of probabilities and ring /
mitigation within the organisation
- Identify potential risks to the organisation
- identify outside expertise required
- Identify vulnerabilities / threats / exposures
Identify risk reduction / mitigation alternatives
- Identify credible information sources
- Interface with management to determine acceptable
risk levels
- Document and present findings
TOP
BUSINESS IMPACT ANALYSIS
To identify the impacts resulting from
disruptions and disaster scenarios that can affect the
organisation and techniques that can be used to quantify and
qualify such impacts. Establish critical functions, their
recovery priorities, and inter-dependencies so that recovery
time objectives can be set.
The professional's role is to:-
- Identify knowledgeable and credible functional area
representatives
- Identify organisation functions
- Identify and define criticality criteria
- Present criteria to management for approval
- Co-ordinate analysis
- Identify interdependencies
- Define recovery objectives and timeframes,
including recovery times, expected losses and priorities
- Identify information requirements
- Identify resource requirements
- Define report format
- Prepare and present business impact analysis
TOP
DEVELOPING
BUSINESS CONTINUITY STRATEGIES
To determine and guide the selection
of alternative business recovery operating strategies
for recovery of business and information technologies
within the recovery time objective, while maintaining
the organisation's critical functions.
The professional's role is to:-
- Understand available alternatives, their advantages,
disadvantages, and cost ranges including mitigation as a
recovery strategy
- Identify viable recovery strategies with business
functional areas
- Consolidate strategies
- Identify off-site storage requirements and
alternative facilities
- Develop business unit consensus
Present strategies to management to obtain commitment
TOP
EMERGENCY
RESPONSE AND OPERATIONS
Develop and implement procedures for
responding to and stabilising the situation following an
incident or event, including establishing and managing
an Emergency Operations Centre to be used as a Command
Centre during the emergency.
The professional's role is to:-
- Identify potential types of emergencies and the
responses needed (e.g. fire, hazardous materials leak,
medical)
- Identify the existence of appropriate emergency
response procedures
- Recommend the development of emergency procedures
where none exist
- Integrate disaster recovery / business continuity
procedures with emergency response procedures
- Identify the command and control requirements of
managing an emergency
- Recommend the development of command and control
procedures to define roles, authority and communications
processes for managing an emergency
- Ensure emergency response procedures are integrated
with requirements of public authorities (Refer also to
Subject Area 10, Co-ordination With Public Authorities)
TOP
DEVELOPING and IMPLEMENTING BUSINESS CONTINUITY PLANS
To design, develop, and implement
the Business Continuity Plan that provides restoration
of critical business processes within the recovery time
objectives.
The professional's role is to:-
- Identify the components of the planning process
- Control the planning process and produce the plan
- Implement the plan
- Test the plan
- Maintain the plan
TOP
AWARENESS
and TRAINING PROGRAMS
To prepare a program to create
corporate awareness and enhance the skills required to
develop, implement, maintain and execute the Business
Continuity Plan.
The professional's role is to:-
- Establish objectives and components of training
program
- Identify functional training requirements
Develop training methodology
- Develop awareness program
- Acquire or develop training aids
- Identify external training opportunities
- Identify vehicles for corporate awareness
TOP
MAINTAINING and EXERCISING BUSINESS CONTINUITY PLANS
To pre-plan and co-ordinate plan exercises, and evaluate
and document plan exercise results. Develop processes to
maintain the currency of continuity capabilities and the
Plan document in accordance with the organisation's
strategic direction. Verify that the Plan will prove
effective by comparison with a suitable standard, and
report results in a clear and concise manner.
The professional's role is to:-
- Pre-plan the exercises
- Co-ordinate the exercises
- Evaluate the exercise plans
- Exercise the plans
- Document the results
- Evaluate the results
- Update the plan
- Report results / evaluation to management
- Understand strategic directions of the business
- Attend strategic planning meetings
Co-ordinate plan maintenance
- Assist in establishing an audit program for the
Business Continuity Plan
TOP
PUBLIC
RELATIONS and CRISIS CO-ORDINATION
To develop, co-ordinate, evaluate and
exercise plans to handle the media during crisis
situations. To develop, co-ordinate, evaluate and
exercise plans to communicate with and, as appropriate,
provide trauma counselling for employees and their
families, key customers, critical suppliers,
owners/stockholders and corporate management during
crisis. Ensure all stakeholders are kept informed on an
as-needed basis.
Note: Details of this subject area
vary from country to country and from industry to
industry. The following basic components should be
considered in addition to those specific to your country
and / or industry.
The professional's role is to:-
- Establish public relations programs for pro-active
crisis management
- Establish necessary crisis co-ordination with
external agencies
- Establish essential crisis communications with
relevant stakeholder groups
- Establish and test media handling plans for the
organisation and its business units
TOP
CO-ORDINATION WITH PUBLIC AUTHORITIES
To establish applicable procedures
and policies for co-ordinating continuity and
restoration activities with local authorities while
ensuring compliance with applicable statutes or
regulations.
Note: Details of this subject area
vary from country to country and from industry to
industry. The following basic components should be
considered in addition to those specific to your country
and / or industry.
The professional's role is to:-
- Co-ordinate emergency preparations, response,
recovery, resumption and restoration procedures with
public authorities
- Establish liaison procedures for emergency /
disaster scenarios
- Maintain current knowledge of laws and regulations
concerning emergency procedures
TOP |
