None

978 views

Published on

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
978
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
9
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • Date
  • None

    1. 1.  Business Continuity Institute Crisis Management Workshop January 24 2008 *connectedthinking
    2. 2. A ‘brief’ apology! <ul><li>Andy will present a case study of an organizational structure for crisis management and demonstrate how this relates to the requirements of BS25999. </li></ul>Slide BCI Crisis Management Workshop No he will not!
    3. 3. Incident versus Crisis Slide BCI Crisis Management Workshop Incident Incident Incident Incident Incident Incident Incident Incident Incident Incident Incident Incident Incident Incident Incident Incident Incident Incident
    4. 4. Incident versus Crisis Slide CRISIS ! BCI Crisis Management Workshop CRISIS!
    5. 5. BCM Lifecycle from BS25999-1 Slide BCI Crisis Management Workshop
    6. 6. BS25999-1: 8.2 Incident Response Structure <ul><li>8.2.1 The organization should define an incident response structure that will enable an effective response and recovery from disruptions </li></ul><ul><li>8.2.2 In any incident situation there should be a simple and quickly-formed structure that will enable the organization to: </li></ul><ul><ul><li>confirm the nature and extent of the incident, </li></ul></ul><ul><ul><li>take control of the situation, </li></ul></ul><ul><ul><li>contain the incident, and </li></ul></ul><ul><ul><li>communicate with stakeholders </li></ul></ul><ul><ul><li>The same structure should trigger an appropriate business continuity response </li></ul></ul>Slide BCI Crisis Management Workshop
    7. 7. Incident Timeline from BS25999-1 Slide BCI Crisis Management Workshop
    8. 8. BS25999-1: Commentary on 8.2 <ul><li>In small organizations the responsibility for incident and business continuity management may be vested in a single individual. Larger organizations may use a tiered approach and may establish different teams to focus on incident management, business continuity and business recovery issues. In some cases these teams may be supported by other teams with responsibility for activities such as media communications and people issues </li></ul>Slide BCI Crisis Management Workshop
    9. 9. UK Gold Silver Bronze Command Structure Slide COBR Police Headquarters Outer Cordon - JESCC Inner Cordon - Fire and Rescue BCI Crisis Management Workshop Gold Silver Bronze Strategic Tactical Operational
    10. 10. Incident Management structure for the UK firm Slide UK Board NBCT Leader NBCT Coordinator ‘ Platinum’ Incident Controller BCI Crisis Management Workshop Assurance I&P Comms Tax UKIT Media Advisory Finance HC/ESC Tax Central / Region ‘ Operations’ Central / Cluster Assurance Central / Region Advisory Central / Region Office Lead Partner Tax Rep Advisory Rep Assurance Rep Office Manager Gold Silver Bronze Strategic Tactical Operational
    11. 11. Incident Response and Business Continuity Slide UK Board National Business Continuity Team National Operations/Business Teams Multi-site/Regional Business Units Office Incident Management Team Single-site Business Units Platinum BCI Crisis Management Workshop Gold Silver Bronze Strategic Tactical Operational
    12. 12. Africa Central - Incident Response Structure Slide Global Firm/Territory IMT Africa Central Country IMT e.g. Ghana Office IMT Operations/Business Unit Teams Platinum BCI Crisis Management Workshop Gold Silver Bronze Strategic Tactical Operational
    13. 13. Pordivnig a fmarerowk for cmmocinuatoin <ul><li>Aoccdrnig to rseeacrh at Cmabirgde Uinervtisy, it deons’t mttaer waht oredr the ltteers in a wrod are wirtten, pordivnig the frist and lsat ltteer are in the rihgt pclae, bcuseae the huamn mnid deos not raed ervey lteter by istlef, but the wrod as a wlohe. </li></ul>Slide BCI Crisis Management Workshop
    14. 14. Framework in practice <ul><li>The OIMT Plan states: </li></ul><ul><li>“ Its purpose is to provide a framework to aid the incident management team in responding directly to actual incidents that may affect our people, client services and business operations, or if the team is activated to deal with a potential future threat or event.” </li></ul><ul><li>(Source: OIMT ‘Bronze’ Plan - Introduction) </li></ul>Slide BCI Crisis Management Workshop
    15. 15. BS25999-1: 8.3 Contents of plans <ul><li>All plans, whether incident management plans, business continuity plans or business recovery plans, should be concise and accessible to those with responsibilities defined in the plans </li></ul>Slide BCI Crisis Management Workshop
    16. 16. This publication has been prepared for general guidance on matters of interest only, and does not constitute professional advice. You should not act upon the information contained in this publication without obtaining specific professional advice. No representation or warranty (express or implied) is given as to the accuracy or completeness of the information contained in this publication, and, to the extent permitted by law, PricewaterhouseCoopers LLP, its members, employees and agents accept no liability, and disclaim all responsibility, for the consequences of you or anyone else acting, or refraining to act, in reliance on the information contained in this publication or for any decision based on it. © 2008 PricewaterhouseCoopers LLP. All rights reserved. 'PricewaterhouseCoopers' refers to PricewaterhouseCoopers LLP (a limited liability partnership in the United Kingdom) or, as the context requires, other member firms of PricewaterhouseCoopers International Limited, each of which is a separate and independent legal entity.  “ You can’t prepare for everything – but you can prepare for anything. ” Paul Youngjohns (involved in Lockerbie recovery)

    ×