Getting Started
Most companies find it advantageous to begin by performing a Business Impact Analysis (BIA). This is the process of analyzing all business functions and the effect that a specific disaster may have on them.
Once the BIA has been completed it will provide the road map for allocation of resources to develop and implement a risk mitigation program for your most critical business functions.
For those risks that can no be mitigated, the BIA will also provide direction to those areas that will require development of Business Continuity plans.
Using information in the BIA, your IT Department will know which applications are required to support your critical functions and their Recovery Time Objectives in order to establish an application priority restoration list.
The BIA will also provide guidance during an event for the Crisis Management Team when decisions are needed to determine business unit recovery priorities.
Project Approach
Building a new Business Continuity Program normally entails the following activities; however, it can be modified to meet specific client needs.
Step 1 – Determine project scope, determine personnel involved and their roles, timing and milestones.
Step 2 – Data gathering for the BIA and possibly resource requirements by survey or interview.
Step 3 – Perform the Business Impact Analysis & review with senior management.
Step 4 – Identify risks and develop a Risk Mitigation Program.
Identify business units requiring Business Continuity Plans.
Develop business recovery strategies.
Step 5 - Design, develop and implement the business continuity plan.
Step 6 – Exercise or test the plans to provide employee training
Determine areas that could be improved.
Step 7 – Schedule periodic plan reviews & updates
Maintain a Change Control Program to ensure your Plans are workable.
|