BUSINESS CONTINUITY PLANNING

Loading...

Flash Player 9 (or above) is needed to view presentations.
We have detected that you do not have it on your computer. To install it, go here.

0 comments

Post a comment

    Post a comment
    Embed Video
    Edit your comment Cancel

    10 Favorites

    BUSINESS CONTINUITY PLANNING - Presentation Transcript

    1. BUSINESS CONTINUITY PLANNING Dr Karolyn Kerr
      • What is Business Continuity Planning (BCP)?
      • Possible Threats
      • Scope and Context of BCP
      • Business Impact Assessments
      • Business Continuity Plan Development
      • Testing and Validation
      • Training
      • Roles and Responsibilities
    2. What is Business Continuity Planning (BCP)?
      • BCP seeks to mitigate all major interruptions of business systems and to ensure a level of capability remains during and following disruption to core business systems
    3. Possible Threats
      • Human error
      • Application failure
      • Intentional disruption from an external source to a network (virus or worm)
      • Power outage
      • Service provider failure
    4. Scope and Context of BCP
      • Significant outage of technology leading to the unavailability of critical business systems
      • Disaster recovery planning a subset of BCP
      • Contingency plans generally relate to a planned event, BCPs relate to services and assets that are already operational
    5. Scope and Context of BCP
      • At a minimum, a BCP must have:
      • A budget formalised and approved by senior management
      • Formal disaster declaration authorities which will be responsible for activating the BCP
      • An incident management system within the organisation to manage BCP processes once activated
      • A regularly reviewed BCP that is benchmarked against industry regulations, where
      • present, and other organisations’
      • processes
    6. BCP Development
      • The steps in the process to develop and implement a BCP commonly noted as required are:
      • Business impact analysis
      • Business continuity plan development
      • Training and testing of the plan
    7. Business Impact Assessment
      • Provides the supporting evidence of where priorities for plans and preparation should take place
      • Criticality criteria identify critical functions the organisation must perform to continue to deliver services
      • Identify risks to critical functions
      • Rate risks according to the likelihood of them occurring & level of impact
    8. Business Impact Assessment
      • Clinical and administrative impact
      • Core information required to treat patients in each area
      • Core clinical services required
      • Core people required to get the systems back up and running
      • Impact of length of time and time of day
    9. Business Continuity Plan Development
      • Complicated process due to the size and complexity of health care organisations.
      • Automated BCP software is available
      • The key tasks in BCP development are:
      • Reduction (of risk)
      • Readiness
      • Response
      • Recovery
    10. Reduction (of risk)
      • Supported through readiness actions
      • Could include ensuring staff have an understanding of any workarounds required i.e. manual admission and discharge packs
    11. Readiness
      • Plans and actions that could be done in preparation for an outage
      • Management and co-ordination requirements
      • Communication – who and how
      • Appropriate team of people aware of their roles - able to be brought together when the BCP is activated
    12. Response
      • Initial response to an outage including impact assessment
      • Pre-planned response cascade
      • Ongoing risk status reported back to emergency team at regular intervals
      • One central control centre with clear guidelines to assist with understanding roles and decision making
    13. Recovery
      • Input electronic data missed during outage
      • Reschedule appointments
      • Temporary admin staff may be required
      • Recovery time dependant on length of outage
    14. Testing and Validation
      • When testing the plan, consider:
      • Is the plan achievable?
      • Is there a clearly defined starting point for the plan, i.e. activation?
      • Does the plan address the situation in a timely, cost-effective, consistent way ?
    15. Testing and Validation
      • Review of the BCP process is required following an outage
      • Ongoing maintenance and review of the plan required to ensure applicability to changing systems and processes.
    16. Training
      • Staff are aware that such a plan exists and where it is kept, their role in BCP
      • Making staff aware of what the impact may be will increase staff ability to function through appropriate workarounds
    17. Roles & Responsibilities
      • IS departments are seen to be responsible for the co-ordination of development
      • Senior health care providers from all disciplines provide analysis of criticality and feasible workarounds and maintain plans
      • Senior executive staff support the development and implementation of the BCP and adequate ongoing funding
    18. Conclusions
      • Likely to become increasingly common throughout the health sector as awareness increases and the shift to almost entirely paperless systems continues.
      • Comprehensive plan required in health care organisations, given the criticality of many business systems and the risk to patient care delivery.
    19. Conclusions
      • Development complex and time consuming, with subsequent possible mitigation strategies requiring considerable financial support.
      • No standard benchmarks for the development of BCPs, but consistency enough within the literature to guide developers towards an appropriate plan for their organisation.

    + HINZHINZ, 3 years ago

    custom

    2118 views, 10 favs, 1 embeds more stats

    BUSINESS CONTINUITY PLANNING Workshop
    Dr Karolyn Ke more

    More info about this document

    © All Rights Reserved

    Go to text version

    • Total Views 2118
      • 2117 on SlideShare
      • 1 from embeds
    • Comments 0
    • Favorites 10
    • Downloads 0
    Most viewed embeds
    • 1 views on http://s3.amazonaws.com

    more

    All embeds
    • 1 views on http://s3.amazonaws.com

    less

    Flagged as inappropriate Flag as inappropriate
    Flag as inappropriate

    Select your reason for flagging this presentation as inappropriate. If needed, use the feedback form to let us know more details.

    Cancel
    File a copyright complaint
    Having problems? Go to our helpdesk?

    Categories