Business Continuity Planning for Sample company Robert Lengyel June 2007 Version. 1.7

Robert Lengyel June 2007 Version. 1.7

Aim of this workshop Introduce the concept of Business Continuity Planning (BCP) Increase BCP awareness throughout the Company Gain skills to prepare & test business continuity plans

Introduce the concept of Business Continuity Planning (BCP)

Increase BCP awareness throughout the Company

Gain skills to prepare & test business continuity plans

Outline of workshop What is Business Continuity Planning (BCP) Why is BCP important for you ? Our approach to BCP Using a template to create plans Practice session & discussion Testing of plans We follow Australian and International Standards Future communication & summary

What is Business Continuity Planning (BCP)

Why is BCP important for you ?

Our approach to BCP

Using a template to create plans

Practice session & discussion

Testing of plans

We follow Australian and International Standards

Future communication & summary

What is Business Continuity Planning (BCP)? Business continuity is defined as: “ the uninterrupted availability of all key resources supporting essential business functions” Australian National Audit Office, 2000 Business continuity planning is defined as: “ those activities associated with preparing documentation to assist in the continuing availability of property, people & assets” Handbook on Business Continuity Management HB 221:2004, Standards Australia What to do when a disruption occurs so we can still deliver necessary services to clients!

Business continuity is defined as:

“ the uninterrupted availability of all key resources supporting essential business functions”

Australian National Audit Office, 2000

Why is BCP important for you? Part of risk management Ensures necessary services delivered to your clients Legal, WHS or Company requirement Considered good business practice

Part of risk management

Ensures necessary services delivered to your clients

Legal, WHS or Company requirement

Considered good business practice

Normal BCP approach Break business unit up into logical sections What could cause (threats) the supply of a resource to be disrupted? ( Risk & vulnerability analysis ) What are the chances (likelihood) of these threats occurring? ( Risk & vulnerability analysis ) We follow the “ ALL HAZARDS APPROACH ” Identify your critical business functions in priority order – use past BIA list Define the business impact if functions are disrupted ( Business Impact Assessment ) How long could your critical business processes be offline for? ( Maximum Acceptable Outage ) What resources support these critical business processes? ( BIA ) What do you do if a resource is disrupted 1. Emergency response 2. Business continuity response 3. Recovery response Emergency response is primarily concerned with preserving life & property Continuity response is concerned with the continued delivery of a minimum acceptable level of performance

Break business unit up into logical sections

What could cause (threats) the supply of a resource to be disrupted? ( Risk & vulnerability analysis )

What are the chances (likelihood) of these threats occurring? ( Risk & vulnerability analysis )

We follow the “ ALL HAZARDS APPROACH ”

Identify your critical business functions in priority order – use past BIA list

Define the business impact if functions are disrupted ( Business Impact Assessment )

How long could your critical business processes be offline for? ( Maximum Acceptable Outage )

What resources support these critical business processes? ( BIA )

What do you do if a resource is disrupted 1. Emergency response

2. Business continuity response

3. Recovery response

The three phases of managing a disruption Last back up Initial response & declare incident Restore key processes Backlog process Resume normal operations Future direction Event Emergency response Continuity phase Recovery phase

Using a BCP template to create plans We use a Company business continuity template to construct plans Advantages of using a template include: Common “look and feel” for all plans across the Company Easy to use, has instructions, and helps you maintain plans Helps Research Planning & Evaluation unit check and assist you in plan creation Saves you time and effort for planning

We use a Company business continuity template to construct plans

Advantages of using a template include:

Common “look and feel” for all plans across the Company

Easy to use, has instructions, and helps you maintain plans

Helps Research Planning & Evaluation unit check and assist you in plan creation

Saves you time and effort for planning

Template divided into 3 sections 1. Planning 2. Response 3. Recovery and recording Lets go through the template together

1. Planning

2. Response

3. Recovery and recording

Lets go through the template together

Practice session creating your own BCP Let’s identify your critical business functions 2. You choose a critical business function for your work area 3. Select one resource that supports this critical business function 4. Use the t emplate to create a BCP for the disruption of this resource 5. You have 15 minutes to fill in and complete the template 6. Class discussion about your first business continuity plan

Let’s identify your critical business functions

2. You choose a critical business function for your work area

3. Select one resource that supports this critical business function

4. Use the t emplate to create a BCP for the disruption of this resource

5. You have 15 minutes to fill in and complete the template

6. Class discussion about your first business continuity plan

Discussion Lets talk about what we have discovered so far QUESTIONS CONCERNS SUGGESTIONS IDEAS

Testing of BCP’s Why should we test our business continuity plans? Different ways of testing the plans How often should we test our plans? Who should test the plans? 5. What to do with the “ test results ”

Why should we test our business continuity plans?

Different ways of testing the plans

How often should we test our plans?

Who should test the plans?

5. What to do with the “ test results ”

We follow Australian & International Standards Handbook - Business Continuity Management HB 221:2004, Standards Australia Handbook – A practitioners guide to business continuity management, HB 292-2006, Standards Australia Principles & Procedures from Disaster Recovery Institute International (DRII) www.drii.org Both organisations acknowledge each other in their publications!

Handbook - Business Continuity Management

HB 221:2004, Standards Australia

Handbook – A practitioners guide to business continuity management,

HB 292-2006, Standards Australia

Principles & Procedures from Disaster Recovery Institute International (DRII) www.drii.org

Both organisations acknowledge each other in their publications!

Future communication and summary Communicating with BCP Manager ’s unit Maintaining and updating plans and tests 3. Plan location and ownership 4. Concluding remarks from Robert 5. Comments by you! 6. Fill in the feedback form and send to David XXXX

Communicating with BCP Manager ’s unit

Maintaining and updating plans and tests

3. Plan location and ownership

4. Concluding remarks from Robert

5. Comments by you!

6. Fill in the feedback form and send to David XXXX

Handout for opening remarks Over the past few years Business Continuity Management has become an important element of good corporate governance and will be critical to organisational sustainability in an increasingly turbulent environment. Business Continuity Management is an integral part of an organisation’s overall approach to effective risk management and should be closely aligned to an organisation’s efforts in emergency management.

Over the past few years Business Continuity Management has become an important element of good corporate governance and will be critical to organisational sustainability in an increasingly turbulent environment.

Business Continuity Management is an integral part of an organisation’s overall approach to effective risk management and should be closely aligned to an organisation’s efforts in emergency management.

Hot Dog Stand – Case Study Handout Imagine you own a hot dog stand that opens at Lang Park during big events. You have 10 staff and sell hot dogs in bread rolls covered in tomato sauce. You also sell Pepsi, Coke, Apple & Orange juice, and bottled water. You turn over around $25 000 each nightly event. You main equipment and resources are: Staff – 10 people Fresh water Uncooked sausages Notes and coins adequate to supply change to around 5 000 customers 2 Hot water urns powered by electricity Bread Tomato sauce ONE of your critical business processes is giving change to customers. Resources supporting this process include a supply of change, a cash register, adequate power via electricity supply or batteries, and a staff member to carry out the process What happens if one resource is disrupted – e.g. you run out of change! Your business continuity plan would be for a “run out of change” disruption – what do I have to do, where to go, who to see etc. Other critical functions include cooking hot dogs, serving customers etc.

Imagine you own a hot dog stand that opens at Lang Park during big events. You have 10 staff and sell hot dogs in bread rolls covered in tomato sauce. You also sell Pepsi, Coke, Apple & Orange juice, and bottled water.

You turn over around $25 000 each nightly event.

You main equipment and resources are:

Staff – 10 people

Fresh water

Uncooked sausages

Notes and coins adequate to supply change to around 5 000 customers

2 Hot water urns powered by electricity

Bread

Tomato sauce

ONE of your critical business processes is giving change to customers. Resources supporting this process include a supply of change, a cash register, adequate power via electricity supply or batteries, and a staff member to carry out the process

What happens if one resource is disrupted – e.g. you run out of change!

Your business continuity plan would be for a “run out of change” disruption – what do I have to do, where to go, who to see etc.

Other critical functions include cooking hot dogs, serving customers etc.