The Coffee Bean & Tea Leaf(CBTL), Business strategy case study
5.2 alok nigam putting the bcp to ork - use of automation sd
1. Putting the BCP to work:
Use of automation
Alok Nigam | Risk & Compliance Lead
EdgeVerve Systems Limited
2. Agenda
Need of automation
What are the pain points in the current BCMS?1
Benefits of automation
How can automation boost BCMS effectiveness?2
Automation maturity
What are the various levels in BCMS automation continuum?3
3. BCM pain points: Root cause
Not fit for
purpose
Out of
date info
Not
accessible
One size doesn’t fit
all; necessary
customization is
required
Accuracy & availability of data is critical to decision making
1 2 3
BCP is seen as a one
time initiative and
the benefits are
expected lifetime
Shining printed BCP
manual in command
center is not the
end objective
4. Benefits of automation: 3Rs
a
a
aDefine
Govern
Deploy
Scope of automation across BCM lifecycle
Relevant
Accurate | Custom | Update
Rational
Integrate | Learn | Mature
Responsive
Access | Coordinate | Monitor
5. Benefits of automation: Define
Custom
Approve
Accurate
Reduce
Update
Define
Plan development,
implementation and
validation
Define Deploy
Govern
Not one size fits all. Tweak the
methodology
Automated workflow and approval
management
Validate data the very first time while
being captured
Automation and streamlining of BIA /
RA workflows reduce time
Trigger reminders and ensure periodic
reviews / validation
1
2
3
4
5
6. Benefits of automation: Deploy
Identify
Access
Inform
Coordinate
Assure
Deploy 1
2
3
4
5
Put the plan to work,
manage crises while
minimizing impact
Define Deploy
Govern
Mine data from structured /
unstructured sources
Plan accessible real time and response
largely as per plan
Periodically communicate with
stakeholders – consistent message
Manage crisis response across
stakeholders
Monitor on-ground status of crisis
response - unplanned / planned
7. Benefits of automation: Govern
Integrate
Learn
Compliance
Mature
Holistic
Govern 1
2
3
4
5
Maintain the plan
while ensuring ongoing
improvement
Define Deploy
Govern
Connect with system and applications
- Business, L&D, Risk, HR, Comm, etc.
Benchmark crises response and
identify improvement opportunities
Ongoing assessments and audits
required for compliance
Quantify BCM maturity and identify
improvement areas through metrics
BCP is integral part of enterprise risk
management. Holistic risk posture
8. Automation decision
Decide Recommend
Require Essential
Scale
Complexity
SmallLarge
Low High
Scale
↘ Locations
↘ BU / teams / stakeholders
↘ Entities
Complexity
↘ Pace of changes
↘ Legal / Reg / Contractual req
↘ Customization
… and many more
… and many more
9. BCM Automation: Maturity model
Optimized
Managed
Defined
Initial
Ad hoc
5
4
3
2
1
Entire BCMS lifecycle is driven and managed with automation
with an aim to improve ongoing efficiency and effectiveness
BCMS components are automated and there is an
end to end integration with other systems
Components are automated and there is
basic level of integration within BCMS
Standalone BCMS components are
automated in piecemeal fashion
No / very little automation
in business continuity
10. Health
BCMS Dashboard: Putting it all together!
Incidents Trend
1. Strike in BLR; Sep 13
2. Hurricane in San Diego
3. Floods in Dalian
HIGH
MED
MED
BLR Strike Plan Activated OFF TRACK
PREPARE RESPOND RECOVER RESTORE
5 days to strike
12 actions
delay
Fac: Escalated
Processes
impacted
• BCP invoke
Sep 13
• 48 actions
63 Recovery
required
Recovery
possible35% 38%
• WFH
• Relocation
• 20 days
• 65 actions
• Crisis
learning
BLR: Strike plan act
INCIDENT MODE
35% up QoQ
Incidents trend
Audit
Testing
Documentation
Tests conducted 70%
ON TRACK
NOT REVISED
65% closed
Closed
Ongoing
Not started
ON TRACK
92% BIA 43% RA 93% Crisis plan