The document outlines the importance of business continuity planning (BCP) and management (BCM) for organizations to prepare for potential threats and minimize operational disruptions. It details strategies for recovery, resilience, and operational continuity, emphasizing the need for a documented business continuity plan and engagement from all staff. Challenges such as management commitment and organizational culture are also highlighted as obstacles to effective planning.

1. BUSINESS CONTINUITY
PLANNING
SUDARSHA JAYAWARDENE

5. WHAT CAN WE DO ABOUT IT?
GET ORGANIZED
PRIORITIZE THE RESOURCES FOR RECOVERY OF
CRITICAL FUNCTIONS
TO
MINIMIZE IMPACT

6. WHAT CAN WE PLAN FOR ?

7. Plan for the consequences of loosing these

8. WHAT IS BUSINESS CONTINUITY MANAGEMENT ?
HOLISTIC MANAGEMENT PROCESS THAT ;
1. IDENTIFIES :
• POTENTIAL THREATS TO AN ORGANIZATION
• THE IMPACTS TO BUSINESS OPERATIONS THOSE THREATS IF
REALIZED MIGHT CAUSE
2. PROVIDES A FRAME WORK FOR BUILDING ORGANIZATIONAL RESILIENCE
TO ACHIEVE MINIMUM ACCEPTABLE OPERATIONAL LEVELS

9. WHAT IS RESILIENCE?
Ability to “bounce back” from a Disaster
Position
1
Position
2

10. WHY WORRY IF WE HAVE NEVER FACED AN ACTUAL DISASTER ?
Assure service
levels
Competitive
Advantage
Stakeholder
Confidence

11. BCM FRAMEWORK IN ORGANIZATIONS
Risk Management
Information Security
Emergency Management
Communications
Human Resources
Business
Continuity
Management

12. Source: BCI Institute
TOP 10 DISRUPTIONS IN 2018

13. BUSINESS IMPACT ANALYSIS
- THE FOUNDATION FOR BCP
ANALYZE THE IMPACT OF LOSS/DISRUPTION OF
CRITICAL BUSINESS FUNCTIONS TO BUSINESS WITH TIME

14. TIMING IS THE CORE…
RECOVERY TIME OBJECTIVES
Adopt Suitable Strategies to
Recover up to Minimum

16. STRATEGY FOR PEOPLE
• GET THE SERVICE FROM TRANSFERRED/RESIGNED/TEMPORARY EMPLOYEES
SUPPLIERS/VENDORS.
STRATEGY FOR INFORMATION
• KEEPING BACKUPS OF NETWORK DIAGRAMS, AND CONFIGURATION INFORMATION IN
A DIFFERENT SITE
STRATEGY FOR SUPPLIES
• ARRANGEMENTS WITH HARDWARE VENDORS FOR DELIVERY AT SHORT NOTICE
STRATEGY FOR PREMISES
• Maintain hot site for Internet connectivity (50%).
• Maintain Warm site for Internet connectivity (50%)

17. STRATEGIES FOR TECHNOLOGY
• REDUNDANT CAPACITIES FOR INTERNATIONAL INTERNET LINKS.
• BUILDING FAULT TOLERANCE INTO HARDWARE INFRASTRUCTURE,
• RAID5 DRIVE ARRAYS
• REDUNDANT POWER SUPPLIES, OR REDUNDANT SWITCH CONFIGURATIONS.
• DISTRIBUTED SERVERS FOR AAA AND DNS APPLICATIONS, LOAD BALANCING
• INVESTMENT FOR NEW CABLE NETWORKS.
• ILL AND BROADBAND REDUNDANT PORTS AT ALTERNATE SITE.
• IMPROVING REDUNDANCY BY SWAP AGREEMENTS WITH OTHER CABLE
PROVIDERS.

18. WHAT IS A BUSINESS CONTINUITY PLAN ?
It is a documented procedure that guide the organization to respond,
recover, resume and restore to a Pre- defined level of operations

19. PLAN TESTING
•MUST ASSURE THAT BC PLANS ARE WORKABLE
•EVERY ONE NEED TO BE AWARE ON WHAT TO DO
HOW TO DO & WHEN TO DO
•TABLE TOP, SIMULATION, LIVE TESTING

21. ISO 22301:2012 & BCMS
INTERNATIONAL STANDARDS ON BUSINESS CONTINUITY

22. Source: BCI Horizon scan report 2019

23. CHALLENGES WE FACE
•TOP MANAGEMENT COMMITMENT
•“WE HAVE NEVER FACED A DISASTER SO WHY WORRY ?”
•INVESTMENT ON ALTERNATE ARRANGEMENTS
•“WE HAVE OTHER IMPORTANT THINGS TO DO”
•ORGANIZATION CULTURE

24. THANK YOU !