14. LEVEL OF HARM
A B C D E
NATURE OF HARM
RELEVANT
MEASURE
Extremely
serious harm
Very
serious
harm
Serious
harm
Minor harm
No
significant
harm
Financial Loss
(loss of sales,
unforeseen costs,
legal liabilities, fraud)
Total financial
impact:
Over £10m
£1m to
£9.9m
£100k to
£1m
£10k to
£99k
Under £10k
Degraded
performance
(failure to achieve
targets, loss of
productivity)
Key targets
under-
achieved by:
Over 10% 6% to 10% 1% to 5%
Less than
1%
No Impact
Number of
staff hours
wasted
Over 10,000
Staff hours.
1001 to
10,000 Staff
hours
501 to 1000
Staff hours
100 to 500
staff hours
0 to 100
staff hours
What’s The HARM – 1?
15. LEVEL OF HARM
A B C D E
NATURE OF HARM
RELEVANT
MEASURE
Extremely
serious harm
Very
serious
harm
Serious
harm
Minor harm
No
significant
harm
Performance Loss
(Customers)
Customers
not Served:
More than 20% 12-20%
10-12%
5-10% <5%
Reputation Loss
Bad Publicity
in:
National and
international
media
National
media,
inside pages
Local media,
front
Local
media,
restricted
No
coverage
What’s The HARM – 2?
16. What’s The HARM – 3?
LEVEL OF HARM
LOCATION Total HARM
A
(*20)
B
(*5)
C
(*3)
D
(*2)
E
(*1)
Location 5 113 4 4 2 2 3
Location 7 100 5 0 0 0 0
Location 1 100 3 5 4 0 3
Location 3 94 3 5 2 0 3
Location 6 85 1 4 9 5 8
18. We can count…
Number of Plans ?
Number of Changes ?
Regular Sign-off ?
Content of Plan ?
Measuring Plan Development
But it’s easy to count the wrong data….
22. Orientation Briefing
Event
Offsite - Multiple BU
Full Simulation
Desktop - Timed / IT Technical Test
Plan Audit / Discussion
Offsite Exercise - Single BU
Desktop / Walkthrough / IT Technical Test
Measuring ExercisesComplexityCost
Time&
Resources
Assurance
23. System/Service RAG
Advantage Elite GREEN
ALEAXIS GREEN
Assistance GREEN
Auda Enterprise Archive Server RED
Audatex (Home) GREEN
Audatex (Motor) GREEN
Bentley Motor Claims AMBER
BIS Printing AMBER
Blue Bay AMBER
Body Management System AMBER
Business Intelligence AMBER
CEDAR-O GREEN
Cedar Financials (Rupert) RED
Chordiant (Host) GREEN
Chordiant (Off Host) GREEN
Cicsfax GREEN
COGNOS Powerplay RED
Complaints MI GREEN
Delphi RED
Direct Connect MIS RED
Direct Connect Voice Recording GREEN
Direct Marketing Information System (Closed) RED
Direct Connect – SAP-RG GREEN
DVLA GREEN
E Commerce Daily MI GREEN
E Financials (Closed) GREEN
eCRM GREEN
eCRM Payment Gateway GREEN
Equifax GREEN
Fax_web/Connect (Access to IS2000) GREEN
FIDOSCAN RED
Finsure GREEN
Gentran GREEN
Goldmine GREEN
Hibernate RED
HALCO (Barrell) GREEN
HALCO (Guize) GREEN
IS2000 GREEN
ITP Rating and Pricing RED
Landscape GREEN
Lotus Notes GREEN
System/Service RAG
MAM RED
Microstrategy GREEN
National Hunter Claims GREEN
NetConnect GREEN
NetConnect SAS GREEN
NET_Database RED
NUCLEAR MEDICINE RED
Oracle Financials GREEN
Oracle FM GREEN
Personnel Lines GREEN
Probe RED
PSF GREEN
PULSE GREEN
RAS (Closed) GREEN
RAS BASE STRATA RED
Redman Reporter RED
Redman Scheduler GREEN
Robotic manuals GREEN
SAS BAA-G GREEN
SAS MIA-L GREEN
SAS MIA-M GREEN
Solcase (Barrell) RED
Solcase (Guize) RED
Special Risks Application RED
Stolen Vehicle Recovery System (TRACKER) GREEN
Teamsite AMBER
Toucan Lite GREEN
TARDIS (Tracker) AMBER
UIS (Clement) AMBER
UIS (Devolved) AMBER
UK MI Data Warehouse GREEN
UK MI Seahorse GREEN
UK Overseas Data Feeds GREEN
ULTRA GREEN
Vectus GREEN
Vehicle Asset Management (TRACKER) GREEN
Voice Recording (Family) GREEN
Web Channels (Household) GREEN
Web Channels (Life) GREEN
Web Channels (Motor) GREEN
Web Channels (UK Special Partnerships) GREEN
IT DR Status
24. For
Every Recovery Test
Every Business
Every Year
.......... We measured up to 13 components
Could also apply it to crisis exercises, callout
tests etc.
Measuring Exercise Components
25. Measuring an Exercise - 1
Q1: How many STAFF will take part in the
exercise compared with full recovery
requirements?
10 9 8 7 6 5 4 3 2 1
Criticality
(1 to 10)
26. Q2: How much HARDWARE is in scope
compared with full recovery requirements?
10 9 8 7 6 5 4 3 2 1
Not part
of plan
Criticality
(1 to 10)
Measuring an Exercise - 2
27. Q3: How many APPLICATIONS are being
tested compared with full recovery
requirements?
10 9 8 7 6 5 4 3 2 1
Not part
of plan
Criticality
(1 to 10)
Measuring an Exercise - 3
29. Division Target Actual KRI RAG
Div A 68 76.58 58 Green
Div B 68 74.45 58 Green
Div C 68 78.91 58 Green
Div D 68 69.26 58 Green
Div E 68 50.71 58 Red
Div F 68 56.18 58 Red
Div G 68 63.43 58 Amber
Div H 68 61.30 58 Amber
Div J 68 76.99 58 Green
Div K 68 50.41 58 Red
Average 68 67.88 58 Amber
Key Risk Indicators – 1
30. 20
30
40
50
60
70
80
Div A Div B Div C Div D Div E Div F Div G Div H Div J Div K
Score
Division
BCM Testing KRI - Score
Target
Actual
KRI
Key Risk Indicators – 2
31. Division Target Actual KRI RAG
Div A 68.0 69.21 58 Green
Div B 72.2 74.45 64 Green
Div C 72.2 78.91 64 Green
Div D 75.8 77.26 66 Green
Div E 56.5 42.12 50 Red
Div F 56.0 48.20 50 Red
Div G 56.0 53.56 50 Amber
Div H 80.0 75.60 72 Amber
Div J 85.5 85.88 75 Green
Div K 85.5 74.33 75 Red
Average 73.0 72.41 62.4 Amber
Key Risk Indicators – 3
32. Key Risk Indicators – 4
20
30
40
50
60
70
80
90
100
Div A Div B Div C Div D Div E Div F Div G Div H Div J Div K
Score
Division
BCM Testing KRI - Score
Target
Actual
KRI
37. Mains
Generator
UPS Comms
UPS Desk
Run Time
Cooling
Water Mains
Generator
UPS Comms
UPS Desk
Run Time
Cooling
Water
Mains
Generator
UPS Comms
UPS Desk
Run Time
Cooling
Water
Mains
Generator
UPS Comms
UPS Desk
Run Time
Cooling
Water
Mains
Generator
UPS Comms
UPS Desk
Run Time
Cooling
Water
Mains
Generator
UPS Comms
UPS Desk
Run Time
Cooling
Water
Location Risk Wheels
38. 1. Quality Scores
Below are the agreed quality scores for the contract which reflect the level of compliance with Policy and
the overall effectiveness of the controls in place.
QUALITY SCORE FOR EACH REVIEW SECTION
TotalQualityRating
Supplier Performance
Relationship
Management
BCM
Performance
FinancialReview
ValueImprovement
Contract
Management
Change
Management
RiskManagement
ExitArrangements
BusinessContinuity
Mgt.
2012 Review Score 2 3 2 3 3 3 2 3 21 Green
2011 Review Score 2 3 0 0 2 2 0 2 11 Red
Supplier Reviews
40. 0
10
20
30
40
50
60
70
80
90
100
0 5 10 15 20 25 30
ContractValue
Review Score
Contract Value vs Review Score
Contract Value (£m)
In the main, higher
value contracts have a
better score = better
managed.
However, some
large value
contracts have
poor scores
Supplier Reviews
43. Is BCM an Expense......?
Common views by senior
management?
“BC costs us money”
“It’s a necessary evil”
“It doesn’t increase the bottom
line”
44. .....or an Investment?
Benefits
Easier bid / tender
qualification
Differentiates our
proposition – offers
quality and reliable service
Reduces risk in supply or
value chain network
ISO 22301?
45. Measurement Adds Value
Measurement provides level playing field
Applicable to public, private and voluntary
sectors: size doesn’t matter
Measurement provides roadmap
Can be used to enhance current BCM
Incentive for senior management to take it more
seriously
Helps target investment
