Business Continuity Business Continuity Planning Planning Diane - - PDF document

1

In nature the flow of a river can never be stopped. If an impediment is placed in its path its course will change

• immediately. Observe the same river in a year and the course

will be different still. Come back in 10 years and the course of the river may be unrecognizable. The flow of a river is continual, uninterruptible and adaptable. So too must the natural flow of business. No matter what

• bstacles arise, successful enterprises must go over, around
• r under them.

Business Continuity Planning Business Continuity Planning

Presented by:

Diane Engstrom

Christian Brothers Risk Management Services

2

Creator God, through your world and people that surround us, we pray that we may grow more aware this day of your life giving presence. Open our minds and hearts to apply the knowledge from today’s web conference for the good of all. We ask these things in Jesus’ Name. Amen Creator God, through your world and people that surround us, we pray that we may grow more aware this day of your life giving presence. Open our minds and hearts to apply the knowledge from today’s web conference for the good of all. We ask these things in Jesus’ Name. Amen

Opening Prayer Opening Prayer

Business Continuity Planning Business Continuity Planning

Presented by:

Diane Engstrom

Christian Brothers Risk Management Services

Envisioning the Future in an Uncertain World

3

What should I do in an Emergency?

How do I contact my employees?

What do I tell my customers?

Where do we go?

I need supplies and a PC so I can start working again! The press keeps asking me all these questions.

What do I tell them?

All my files were destroyed! What should I do now? Am I getting paid?

Contingency Planning

A Process – Not a Product

Executive Approval & Support

4

4 Step Planning Process

• 1. Establish a Planning Team

Step 1 Establish a Planning Team

Select Committee Members

Designate a Coordinator

5

4 Step Planning Process

• 1. Establish a Planning Team
• 2. Gather Information

Step 2 Gather Information

Least important function, as viewed by consumers and stakeholders. 6 5 4 3 2 Most important to functioning and survival. 1 Priority Essential Functions

Essential Functions

6

Resource Requirements Vital Records

Vital Record Who Needs Access How Often? Where Stored Format Copies Available? If Yes

Electronic Paper Other Yes No On-site Off-site Electronic Paper Other Yes No On-site Off-site Electronic Paper Other Yes No On-site Off-site Electronic Paper Other Yes No On-site Off-site Electronic Paper Other Yes No On-site Off-site Electronic Paper Other Yes No On-site Off-site Electronic Paper Other Yes No On-site Off-site Electronic Paper Other Yes No On-site Off-site Electronic Paper Other Yes No On-site Off-site

Suppliers & Vendors

Backup Supplier Supplier #3 Backup Supplier Supplier #2 Backup Supplier Supplier #1 Materials/Service Contact Name Phone/Fax/Other Address Name

7

Software Inventory

SOFTWARE INVENTORY LIST

DATE PURCHASED WHERE PURCHASED LICENSE KEY # OF LICENSES USED BY VERSION PROGRAM

4 Step Planning Process

• 1. Establish a Planning Team
• 2. Gather Information
• 3. Develop the Plan

Step 3 Develop the Plan

8

Table of Contents

I. EXECUTIVE SUMMARY II. ESSENTIAL FUNCTIONS & RESOURCE REQUIRMENTS III. THREAT ASSESSMENT IV. TEAMS & RESPONSIBILITIES V. EDUCATION & TESTS VI. APPENDIX

I. Executive Summary

• Mission of the Organization
• What constitutes an emergency/disaster
• The purpose of the Plan

Objectives of the Plan

9

Organizational Threats

THREATS A - Z Acts of God - air conditioning failure - arson Blackouts - blizzards - boiler explosion - bomb threats - bridge collapse-brownouts - brush fires – Chemical accidents - civil disobedience – communications failure- computer crime - corrosive materials - Disgruntled employees- Denial of service - Earthquakes - embezzlement - explosives – extortion - Falling objects - fires - floods - Hardware crash - high winds - heating or cooling failure - hostage situations - human error – hurricanes - Ice storms - interruption of public infrastructure services - Just-in-time suppliers – Kidnapping - Labor disputes - lightning strikes - Mold contamination - No business continuity plan - Personnel non-availability - plane crashes - phishing - public demonstrations- Quirky software - Radiology accidents - railroad accidents - Sabotage - sewage backups - snow storms - software failure - sprinkler failure - Telephone problems - (the) theft of data or computer-thunderstorms - tornados - transportation problems – (the) Unexpected - Vandalism - viruses - Water damage - workplace violence - Xenon gas leaks - Yellow fever outbreak - Zombie (hacker attack) Chemical accidents No business continuity plan Personnel non-availability

Threat Assessment

BUSINESS IMPACT ANALYSIS

TYPE OF EMERGENCY (or threat) Probability Human Impact Property Impact Business Impact Internal Resources External Resources Total

High Low 5 1 High Impact 5 1 Low Impact Weak Strong Resources Resources 5 1 The lower the score, the better

Plan Assumptions

What? Where? Who? How? Why?

10

Define Levels of Emergency

• Incident – An event of short duration.
• Problem – May be uncertain as to when

normal operations will be able to resume.

• Emergency – Major impact to your
• perations for an extended length of time.

Who Declares an Emergency? Other Emergency Teams to Consider

• First Response

Team or Emergency Response Team

• Life Safety Team

11

Other Emergency Teams

continued

• Damage

Assessment Team

• Emergency

Communications Team

Job Descriptions for each Team

Check List for Team Member

Responsibilities of the

First Response Team

• Pre-Emergency
• Emergency
• Post-Emergency

12

Treasurer’s Checklist

Contact banking authorities to . . . . Increases individual credit card limits as needed. Tracks additional expenses related to the emergency for insurance purposes. Provides expense forms. Approves and/or provides funding for emergency expenses and purchases.

Remarks Treasurer's Responsibilities Task Status

Appendix

• Emergency Phone Numbers
• Directions to Alternate Locations
• Maps & Evacuation Routes
• Expense Sheets & Purchase Order Forms
• Activity Log
• Insurance Information
• Plan Distribution Schedule
• Plan Maintenance Log

Plan Distribution

WHO Name/Position Full Plan Limited Edition Format Paper Electronic Off-site Storage Verified

13

Plan Maintenance Log

Brief Description

• f Change

Change Approval Page(s) Section Date of Change

4 Step Planning Process

• 1. Establish a Planning Team
• 2. Gather Information
• 3. Develop the Plan
• 4. Education & Testing

Step 4 Education & Testing

I hear, I forget. I see, I remember. I do, I understand.

• Chinese Proverb

14

Employee Awareness Training

Tabletop Exercise Discussion Questions

• 1. No damage to property, employees are

fine, however access to facility is restricted due to an external event.

• 2. Building has sustained damage,

employees are fine. Unable to occupy facility for 2 – 4 weeks.

15

Functional Test

Test Script

Date of Test: Conducted at: Department(s) / Individual(s) Involved: Description of Test: Resources Required:

COMPLETED DIARY DATE ACTION ITEMS ACTUAL OUTCOME DESIRED OUTCOME WHO’S RESPONSIBLE FUNCTION TO BE TESTED

“Thank God we had a Plan!”

16

If you were to evacuate from your building today and they announced you could not work at that site for at least the next two weeks, Do you know what to do next? Do your employees?

QUESTIONS

For more information: For more information:

Diane Engstrom

Director of Business Continuity Planning / Director of Operations

Christian Brothers Services/Christian Brothers Risk Management Services

800-807-0300 x 2512 diane_engstrom@cbservices.org

17