The document outlines seven guiding principles for making business continuity and emergency management programs a strategic priority: 1) Integrate the program with risk management and other business programs; 2) Identify and engage key stakeholders; 3) Conduct comprehensive risk assessments to understand business operations; 4) Identify and support the needs of senior management; 5) Emphasize the strategic value of protecting people, reputation, cash flow and customer service; 6) Customize the program to fit the organization's structure and budget; 7) Focus on people, processes, technology and brand protection throughout response and recovery. The principles are aimed at moving programs from a compliance focus to competitive advantage.

1. Integrating Resiliency as a Strategic Priority: Seven Guiding Principles to Bring Your Program to the Next Level

2. Our AimTo share Seven Guiding Principles that can help you make your business continuity and emergency management programs a strategic priority.

3. OutlineThe Need - Background and Observations

4. The Audience - Who the Principles apply to

5. The Principles - Presenting the 7 Guiding Principles

6. Wrap Up, Questions, and DiscussionObservations Many organizations have sound individual plans but lack synergy between them, sometimes resulting in a disjointed and potentially ineffective program

7. Gaps between BCM/EM programs and strategic goals of the organisation

8. Often focus is on compliance vs. competitive advantage

9. BCM and EM practitioners struggle to obtain senior management and/or middle management support

10. Business Continuity and Emergency Management is not adequately leveraged within organisations

11. BCM and EM viewed as a cost centre not a value driver13

12. What does it all mean…Continuity is not a strategic priority

13. What is Resilience from a Strategic Perspective?Business resilience is about capability to prevent disruption and mitigate risks associated with failure to meet objectives

14. Can mitigate significant strategic and operational risk

15. Encompasses people, processes, and technology

16. Is required for any organization offering continuous or a high level of customer service

17. Is about maintaining a competitive advantage before, during, and after a major eventNote: These are strategic business and community issues

18. Who Do These Principles Apply To?Those responsible for business continuity and IT disaster recovery

19. Emergency Management Professionals and Staff

20. Executives and Senior Management

21. Risk Management Professionals The Seven Principles#1 Integrate your program and link it with risk, performance improvement, and other business programs#2 Identify, engage and manage key stakeholders#3 Understand the business operations (and cost of not having resiliency) through comprehensive analysis and risk assessments#4 Identify and support the needs of senior management13

22. The Seven Principles (continued)#5 Emphasize the strategic aspects and value proposition of your program – how it protects people, reputation, cash flow, customer service#6 Customize and “size to fit” – Apply best practices but tailor your program to fit the structure, culture, and budget of your organization#7 Focus on people, process, technology and brand protection throughout response and recovery13

23. # 1 Integrate Your Program Integrate your program and link it with enterprise risk and/or other business programs

24. CRISIS MGMT.ERPIntegrate Your OverviewEmergency Response Plan and ProgramCrisis ManagementBCPDRPIT Disaster Recovery Plan and ProgramBusiness Continuity Plan and Program

25. Business Crisis Business Disaster Enterprise Risk Continuity ManagementContinuityRecoveryManagementPlanningRecoveryPeopleRisk AssessmentRisk AssessmentRM OptimizationRM OptimizationResponseResourcesInfrastructureRisk MonitoringRisk MonitoringManagementContinuity& CoordinationProceduresApplicationsData RecoveryProcessRisk ResponseRisk ResponseCrisis Disaster Emergency Technical Location & Communication Business Interim Business Integrate Business Resilience with other ProgramsDo not try to “go it alone”

26. Integration does not necessarily mean organizational redesign

27. Risk Management is a logical link but select what works best in your organizationIntegrated ProgramBusiness Business Crisis Crisis Business Business Disaster Disaster Enterprise Risk Enterprise Risk Continuity Continuity Integrated ProgramManagementManagementContinuityContinuityRecoveryRecoveryManagementManagementPlanningPlanningEVENTEVENTPeoplePeopleRisk AssessmentRisk AssessmentRecoveryRecoveryRM OptimizationRM OptimizationResourcesResourcesInfrastructureInfrastructureRisk MonitoringRisk MonitoringResponseResponseContinuityContinuityProceduresProceduresApplicationsData RecoveryApplicationsData Recovery& Coordination& CoordinationManagementManagementRisk ResponseRisk ResponseProcessProcessCrisis Crisis Disaster Disaster Emergency Emergency Technical Technical Location & Location & Communication Communication Business Business Interim Business Interim Business Post-EventPre-Pre-Event

28. Integrated Resilience FunctionsExample from our professional services firm

29. # 2 Engage Key StakeholdersIdentify, engage and manage key stakeholders

30. # 3 Understand the Business OperationsConduct frequent and comprehensive analysis and risk assessments to fully understand business operations and cost of not building resiliency

31. Understand Your BusinessProgram ImplementationTrainingThreat, Vulnerability, Risk AssessmentBenchmarkingElements of a Resilient ProgramResponse& RecoveryBusiness Impact AnalysisProgram MaintenancePlan DevelopmentRecoveryPlan Testing StrategyPlanning

32. RecoveryPlan Testing StrategyPlanningUnderstand Your BusinessAn effective continuity program begins with understanding the business Program ImplementationTrainingThreat, Vulnerability, Risk AssessmentBenchmarkingElements of a Resilient ProgramResponse& RecoveryBusiness Impact AnalysisProgram MaintenancePlan Development

33. Understand Your BusinessAn effective continuity program achieves resiliency through:Dynamic Planning

34. Response and Recovery

35. Focus on People