3. Let me begin with a story…
• There once was a
company…
• Who found themselves in a
difficult situation and
needed additional financial
resources..
• And needed a “key” to
unlock their financial
resources…
3(c) Robere & Associates (Thailand) 2010
4. But…
• There’s no Magic
when it comes to
survival.
• It is a structured
approach to
understanding our
business, and
planning for the
“unplanned”
4(c) Robere & Associates (Thailand) 2010
5. What’s important to you?
• Have you ever thought about
how you would survive in case
of an emergency?
– External:
• Political disruptions
• Natural Catastrophes
• Change in market or customers
– Internal:
• Strikes
• Fire
• breakdowns
• illness
5(c) Robere & Associates (Thailand) 2010
6. How do we ensure on-going
business success – continuity?
(c) Robere & Associates (Thailand) 2010 6
• In 2006, British
Standards (BSI) created
a document called
“Business Continuity
Management” COP
• It was followed in 2007
by an auditable standard
for “Business Continuity
Management”
7. Today, we’ll discuss the BCM
Code of Practice
• The whole purpose of
this code of practice is
to define a structured
approach to recognizing
the possible areas in the
company that could be
subject to a disruption
and the effect it would
cause
(c) Robere & Associates (Thailand) 2010 7
8. Managing the “program”
• Similar to ISO9001,
ISO14001
• Responsibilities
• Ongoing Management
• Documentation
– Programs
– Plans
– reporting
(c) Robere & Associates (Thailand) 2010 8
9. Who are we?
What do we need?
• Business Impact
Analysis (BIA)
• Identification of critical
activities
• Determining Continuity
Requirements
• Evaluating Threats (Risk
Assessment)
• Determining Choices
(c) Robere & Associates (Thailand) 2010 9
10. What are we going to do?
• What are our options?
– People
– Premises
– Technology
– Information
– Supplies
– Stakeholders
• Civil emergencies
• Sign off
(c) Robere & Associates (Thailand) 2010 10
11. How do we use our strategy to
respond?
• Response Structure:
– Confirm the nature of
the problem
– Take control
– Contain the incident and
– Communicate with
stakeholders
(c) Robere & Associates (Thailand) 2010 11
12. (c) Robere & Associates (Thailand) 2010 12
Timeline
Incident response
Business continuity
Recovery/ resumption-back-to-normal*
Overall recovery objective:
Back-to-normal as quickly as possible
Incident!
TimeZero
Within weeks to months:
Damage repair / replacement
Relocation to permanent place of work
Recovery of costs from insurers
Within minutes to days:
Contact staff, customers, suppliers, etc.
Recovery of critical business process
Rebuild lost work-in-progress
Within minutes to hours:
Staff and visitors accounted for
Casualties dealt with
Damage containment / limitation
Invocation of BCP
*Note: Do you really want to go back to “normal”?
14. Types and methods of exercising
BCM strategies (Ref: BS25999-1)
(c) Robere & Associates (Thailand) 2010 14
15. Embedding BCM in your
organization
• General
• Awareness
• Skills training
(c) Robere & Associates (Thailand) 2010 15
16. Business Continuity Management is:
An holistic management process that identifies potential threats
to an organization and the impacts to business operations that
those threats, if realized, might cause, and which provides a
framework for building organizational resilience with the
capability for an effective response that safeguards the interests of
its key stakeholders, reputation, brand and value-creating
activities.(1)
(c) Robere & Associates (Thailand) 2010 16
In
Conclusion..
(1)
BS25999-1, P1
17. 17
"Upon the plains of hesitation bleach the bones of
countless millions who, on the threshold
of victory, sat down to wait, and
awaiting they died."
- Anonymous
18. Thank you for you time and
attention…
Paul Robere
Robere & Associates (Thailand) Ltd.
(c) Robere & Associates (Thailand) 2010 18
