Business Continuity | Print |  Email
Business Continuity Planning

This detailed course for those staff in any organisation that have been tasked with implementing business continuity in their organisation. The current international standard for this is ISO 25999.

The course covers the following:
 
  • Risks to business
  • The need for Business continuity management
  • ISO 25999
  • Business impact analysis
  • Management of security risks
  • Developing and choosing a strategy
  • Developing the plan(s)
  • Testing and maintaining the plan
  • Embedding BCP in the organisational culture
  • Certification

Who Should Attend

  • Executive Management (Chief Executive Officer, Chief Finance Officer and Information Security Officer)
  • Business Continuity/Disaster Recovery Team Leaders and staff
  • Human Resources
  • Information security staff
  • IT Staff
  • Facilities Management
  • Risk Management staff

Learning Outcomes

  • Understand the importance of protecting information
  • Understand the requirements of ISO 25999 and the BCI Standards
  • Understand the business information flows in your organisation
  • Perform a business impact assessment
  • Perform a risk assessment
  • Develop a BCP Strategy
  • Develop BCP
  • Test and maintain a BCP
  • Embed the BCP culture in the organisation
  • Understand the certification process

The course is based on the Business Continuity Institute’s Standards as outlined below:

1. Initiation and Management
Establish the need for a Business Continuity Management (BCM) Process or Function, including resilience strategies, recovery objectives, business continuity and crisis management plans and including obtaining management support and organising and managing the formulation of the function or process either in collaboration with, or as a key component of, an integrated risk management initiative.
2. Business Impact Analysis
Identify the impacts resulting from disruptions and disaster scenarios that can affect the organisation and techniques that can be used to quantify and qualify such impacts. Identify time-critical functions, their recovery priorities, and inter-dependencies so that recovery time objectives can be set.
3. Risk Evaluation and Control
Determine the events and external surroundings that can adversely affect the organisation and its resources (facilities, technologies, etc.) with disruption as well as disaster, the damage such events can cause, and the controls needed to prevent or minimise the effects of potential loss. Provide cost-benefit analysis to justify investment in controls to mitigate risks.
4. Developing Business Continuity Management Strategies
Determine and guide the selection of possible business operating strategies for continuation of business within the recovery point objective and recovery time objective, while maintaining the organisation’s critical functions.
5. Emergency Response and Operations
Develop and implement procedures for response and stabilising the situation following an incident or event, including establishing and managing an Emergency Operations Centre to be used as a command centre during the emergency.
6. Developing and Implementing Business Continuity and Crisis Management Plans
Design, develop, and implement Business Continuity and Crisis Management Plans that provide continuity within the recovery time and recovery point objectives.
7. Awareness and Training Programmes
Prepare a programme to create and maintain corporate awareness and enhance the skills required to develop and implement the Business Continuity Management Programme or process and its supporting activities.
8. Maintaining and Exercising Business Continuity and Crisis Managements Plans
Pre-plan and co-ordinate plan exercises, and evaluate and document plan exercise results. Develop processes to maintain the currency of continuity capabilities and the plan document in accordance with the organisation’s strategic direction. Verify that the Plan will prove effective by comparison with a suitable standard, and report results in a clear and concise manner.
9. Crisis Communications
Develop, co-ordinate, evaluate, and exercise plans to communicate with internal stakeholders (employees, corporate management, etc.), external stakeholders (customers, shareholders, vendors, suppliers, etc.) and the media (print, radio, television, Internet, etc.).
10. Co-ordination with External Agencies
Establish applicable procedures and policies for co-ordinating continuity and restoration activities with external agencies (local, state, national, emergency responders defence, etc.) while ensuring compliance with applicable statutes or regulations.

Business Benefits

  • Reduce the risk of data or business loss
  • Understand business and information flows in the organisation
  • Develop strategies and BCPs appropriate to your business
  • Understand how to test and maintain the BCP
  • Develop plans and materials for embedding a BCP culture into the organisation
  • Understand the requirements of certification
 
< Prev   Next >
[ Back ]