Business Continuity Basics

David Tickner MBCI

 Business Continuity Planning
• What is it?

• Why is it so important?

• What part can you play?

• What’s in it for you?

2
 What is BCP?
• the processes by which business can be maintained to
an acceptable level until full processes and systems are
restored

• the plans and supporting procedures that guide the

continuity or timely recovery of business operations
following an unplanned interruption to business
operations over an extended period

• BCP is about minimizing the impacts of critical events

on an organisation and its stakeholders [internal and
external]

3
 Business Continuity in context
Disaster Recovery - the creation & execution of
plans to recover the data & systems of an
organisation to the point immediately prior to the
interruption
Contingency - the physical or process alternative to
a single point of failure eg. Back up generator for
power failures
Operational Continuity - the alternative processes
implemented during a failure, which allow the
“process” to continue, whilst relying on the
contingencies or DR Plans to restore full
operations
Business Continuity - the processes by which
business can be maintained to an acceptable level
until full processes and systems are restored
 Where does BCP Fit In
A Key Component of Compliance & Business Resilience

MYTHS & ASSUMPTIONS

Emergency Risk
Management Management • If you have an IT DR Plan you don’t
need BC Planning
• Contingency planning and risk
management cover BCP
IT/DRP BR
Crisis • We’ve already got Evac. Plans
Management
• We’re well insured against losses
BCP
• We’ve been OK until now and
survived a few problems – we’ll be
OK!
• BCP is a minimalist approach
 Goals of BC Planning
• To identify the organisation’s key processes
• To identify the critical underlying technology &
services
• To identify the critical stakeholder relationships
• To identify the alternative approaches
• To establish a plan[s] that can be readily and
effectively activated
• To provide real operational alternatives

6
 In the event of…….
The nature of the major impact incidents would be those that result in:
– Extended loss of, unavailability of or denial of access to the organisation’s
major location at .....................................;
– Extended loss of, or unavailability of key personnel required to deliver the
key functions;
– Extended and significant interruption to critical supply chain goods and
services;
– Extended loss or unavailability of critical infrastructure necessary for the
operation of the organisation or the delivery of its services;
– Extended loss of or unavailability of key information/vital documents,
including electronic data & systems,
Or the combination of or consequential impacts of any of the
above impacts.
 Why is BCP so important?
• Recent international and business crisis events
– September 11 - Hurricane Katrina
– Asian Tsunami - Christchurch ‘quakes
– BP Oil Rig blow-out - Carbon Tax

• Corporate governance/compliance
– Sarbanes-Oxley, APRA, ASIC/ASX, because of failures like
• HIH Insurance, Enron
• Protecting assets, employees and stakeholders
– The influenza pandemics

• Government - for the public good

– New fire warning and evacuation regulations
– Public transport, public safety

8
The Basic BC Planning Model

9
 Identifying Key Stakeholders
Supplier’s Customer’s
Supplier Customer
Supplier(s) Customer(s)
A

S C

Your C
S Organisation A

B S C

B
Potential impacts on you Potential impacts you could create
 Recovery Actions
– too soon? Or too late?
COST/IMPACT

Short RPO RPO Long RPO

RTO MAO

Unrealistic Realistic Unrealistic TIME

- Cost - Optimal - Impact &
time, cost Time
& Impact
 A Simple BCP

Everyone has done BC Planning before.

Just take a holiday…..seriously

The Safeway Warehouse Fire
A perfect scenario…..

13
 In review

What went right?

What went wrong?

 The Real Benefits of BCP
• Maintaining a viable ongoing business
• Continuity of key services
• Reduces and manages uncertainty
• An aid to meeting legal and moral commitments
• Protection of:
– Staff & staff confidence
– Assets
– Reputation
– Economic position
• A firm level of security for both suppliers and
customers

15
Establishing a lasting & effective
culture
Business Continuity Essentials:

– Corporate Commitment

– Staff understanding & training

– Stakeholder engagement

– Planning & testing

– Continuing Review and Revision

 Your Presenter

David Tickner MBCI

Consulting Principal – Computrix Services P/L