Business Continuity - Business Risk & Management


Published on

Here\'s background information on Business Risk & Management\'s business continuity program

  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

Business Continuity - Business Risk & Management

  1. 1. Business Continuity/Crisis Management/Disaster Recovery Planning / Training / TestingPrepared by: Date: 31 Oct 2011Andrew StylesManaging Director
  2. 2. Business Risk & Management Pte Ltd(BRM) We provide an effective services in the following areas:  Developing and implementing business continuity and crisis management plans  Review of your current plans to identifyNumber 1… gaps to improve effectiveness BRM are the premier Thailand-based business  Crisis management team & staff training continuity and crisis management service  Business continuity testing providerWe know Thailand!  IT systems disaster recovery plans …the risks associated with operating in the country and the most effective way to reduce Contact… these risks Andrew StylesCost sensitive $$$ We don’t believe that business continuity should Business Risk & Management Pte Ltd be expensive so we price accordingly. No +66 818935329 budget is too small and no project is too big. andrew.styles@b-r-m.bizAsia Reach We also provide business continuity services across all of Asia Confidential 2
  3. 3. What is business continuity “Plan for what is difficult.” Sun Tzu Focus of business continuity…to minimise disruption Definitions…  The ability to maintain operations/services in the face of a disruptive event.  Business continuity is the activity performed by an organization to ensure that critical business functions will be available to customers, suppliers, regulators, and other entities that must have access to those functions. Confidential 3
  4. 4. Why consider business continuity Events are constantly occurring These unplanned events can have catastrophic effects on businesses Research shows that companies that dont have contingency plans in place are more likely to fail… 80% of businesses affected by a major incident either never re-open or close within 18 months (Source, AXA) Companies that arent able to resume operations within ten days (of a disaster hit) are not likely to survive. (Strategic Research Institute) Research by IBM (Varcoe,1993) showed that 80 per cent of organisations without relevant disaster recovery plans who suffered a critical computer disaster went bankrupt Within two years after Hurricane Andrew struck in 1992, 80 percent of the affected companies that lacked a business continuity plan failed (FEMA) “It can take 20 years to build a business and 15 minutes to destroy it” Warren Buffet 4 Confidential
  5. 5. BenefitsPutting business continuity plans in your organization can prepare your business for any potentialdisaster, help ensure that you will be able to maintain continuity of your businesspractices, reduce or even possibly remove such calamities could have on your organisationIn addition, business continuity planning will… reduce your costs when hit by a crisis make your organization more robust. It can strengthen your organisation against problems help protect your organisations image, brand, and reputation assist in your insurance company viewing you more favourably should some sort of disaster require their involvement offer management a better understanding of their business and ultimately helps identify ways to strengthen any short comings show your investors that you take business seriously Instil customer confidence in your business 5 Recent flooding in Thailand – Honda Car Factory
  6. 6. Reluctance to implement business continuity  Some companies view business continuity as being about preparing for something that may never happen – they’ll deal with crises if they occur.  Companies that don’t assess risks leave themselves vulnerable to events occurring that they could have identified and stopped  Consider these examples and not having any plans in place…  Example 1: A single employee having all the knowledge in one area of the business and that person leaves the organisation suddenly  Example 2: Large fire destroys company’s office building – not having back of critical data, alternative sites  Example 3: A product being sent to a customer is stolen and a replacement is not immediately available Confidential 6
  7. 7. Crisis Management Crisis management is a subset of business continuity Crisis management is the process by which an organisation deals with a major event that threatens to harm the organization, its stakeholders, or the general public “There are risks and costs to a programme of action...but they are far less than the long ranging costs of comfortable inaction.” John F Kennedy Confidential 7
  8. 8. Why have crisis management plans? "The most serious failure of leadership is the failure to foresee“ Robert Greenleaf  Provides a framework for management to respond to a crisis  When people are under extreme pressure they become less effective and are less likely to think straight and logically - same applies to organisations – the ability to come up with logical processes for dealing with issues and developing solutions may be more difficult during the crisis  Developing the crisis management program and having it ready to be implemented before a crisis occurs is more effective  The crisis mgmt plan would include  roles/responsibilities of staff,  crisis team processes and templates to follow,  escalation rules Confidential 8
  9. 9. Phases of a CrisisBusiness incidentresponse ismade up of 3phasesApproximate time Emergency intensityperiods areshown on the ResponsediagramHaving all 3 Crisis Mgmtresponses inplace prior toan event reduces Business Continuitythe impact on ?the business & timeminimises 2 hrs 6 hrs 1 day 1 wk 1 monthdisruption 1 min9
  10. 10. What is disaster recovery?  Process, policies and procedures related to preparing for recovery or continuation of technology infrastructure critical to an organization after a natural or human- induced disaster.  Disaster recovery is a subset of business continuity  While business continuity involves planning for keeping all aspects of a business functioning in the midst of disruptive events, disaster recovery focuses on the IT or technology systems that support business functions Confidential 10
  11. 11. BCM Outcomes Implementing a BCM program results in the following… Business Continuity Plans A detailed set of plans that the company can follow during a crisis to ensure mission critical services are maintained and disruption is minimised Effective Crisis Management Management have a clear understanding on how to manage the crisis A company spokesperson has the skills to talk to the media Staff knowing what to do… An organisational understanding of what to do during a crisis All staff understand and can implement their respective roles during a crisis Confidential 11
  12. 12. Become certified in Business Continuity  After implementing a BC program, companies can become certified  Certification can be by either:  Do a self-declaration that the company complies or  Have a certification company come in and audit the program to verify it complies with the standard selected Confidential 12
  13. 13. Contact detailsNeed help with…Business Continuity | Crisis Management | Disaster Recovery | Security |InvestigationsContact… Andrew Styles Business Risk & Management Pte Ltd +66 818935329 13