ACTIVITIES INVOLVED IN THE BUSINESS CONTINUITY MANAGEMENT

Appoint or nominate an individual at management board level to be accountable for BCM Appoint one or more individuals with responsibility for taking the programme forward.

BUSINESS IMPACT ANALYSIS (BIA)

I. List the key products and services your organization provides which if disrupted for any reason will have the greatest impact.

1. 2. 3. 4. 5.

ability to capture customer orders for our products ability to deliver the customer orders for our products ability to supply invoices / documents to customers able to pay our creditors able to communicate effectively with staff, our sites, customers, suppliers and statutory authorities

II. Identify the maximum length of time that can manage a disruption to each of the key products and services without it threatening your organisations viability, either financially or through a loss of reputation (this is often referred to as the Maximum Tolerable Period of Disruption or MTPD).

1. 2. 3. 4. 5.

ability to capture customer orders for our products - 2 days ability to deliver the customer orders for our products - 1 week ability to supply invoices / documents to customers - 2 days able to pay our creditors - 1 week able to communicate effectively with staff, our sites, customers, suppliers and statutory authorities - 6 hours

III. Set the point in time at which each key products and services would need to be resumed in the event of a disruption (this is often referred to as the Recovery Time Objective or RTO).

1. 2. 3. 4. 5.

ability to capture customer orders for our products - 12 Hours ability to deliver the customer orders for our products - 2 days ability to supply invoices / documents to customers - 24 hours able to pay our creditors - 3 days able to communicate effectively with staff, our sites, customers, suppliers and statutory authorities - 3 hours

IV. Document the critical activities that are required to deliver your key products and services.

Production Inspection Packing & Labeling IT Transportation Communication phone, fax, internet, courier
V. quantify the resources required over time to maintain the critical activities at an acceptable level and to meet the RTO people; premises; technology; information; and supplies and partners

RISK ASSESSMENT Identify the risk

Loss of staff Loss of systems (IT and telecommunications) Loss of utilities eg water, gas or electricity Loss of, or access to, premises Loss of key suppliers Disruption to transport

List what arrangements you currently have in place to prevent or reduce the likelihood of the risk occurring. List what arrangements you could put in place to prevent or reduce the risk on your organisation.

Determine the likelihood & impact of the risk

you will now be able to rank the risks and make an informed decision about what action to take. Treat use of BCM to reduce disruption Tolerate Transfer This might be done by conventional insurance or contractual arrangements, Terminate suspend or terminate the service, product, activity, function or process.

Determine BCM Strategy Development & Implementation of BCM