10 step rookie guide to bcm

sustainable planner

business continuity

professional consulting

presented by:

Virtual Corporation

The Rookie’s Guide to Business Continuity Management

Agenda

Step 1: Gain Executive Buy-in

Step 2: Create a BCP that suits your

company’s specific needs

Step 3: Consider BC program

management software

Step 4: Get a baseline of where your

organization is today.

Step 5: Create a BIA & eBIA

The Rookie’s Guide to Business

Continuity Management

Agenda

Step 6: Pilot your program before a full

enterprise launch

Step 7: Set a clear charter with a Steering

Committee

Step 8: Build team engagement

Step 9: Keep it consistent & holistic

Step 10: Be prepared for an ISO

certification audit

The Rookie’s Guide to Business

Continuity Management

Step 1:

Gain Executive Buy-in

What keeps your CEO up at night?

Quantify the financial impact with the

cost of a disruption.

Operational costs

Revenue lossReputational

loss

Facility

infrastructure loss

Data loss & recovery

Behavioral Changes

Secondary Impact

Mitigation Costs

Initial Impact

Total

Financial

Impact

Security

Modifications

Adverse Event

Step 2:

Create a business continuity

program (BCP) that suits your

company’s specific needs

Don’t fall into the trap of one size fits all.

“This is how we did it at my last company so let’s go!”

Critical considerations:

Program strategy

Program scope

Program support

Step 3:

Consider BC management software

Software is powerful, but it only works as well

as your overarching continuity

management plan & data.

The tool that fits today

needs to adapt with your

program as it grows.

Step 4:

Determine a baseline

3

Ensure that the organizational or business continuity management program effectiveness can be quantified21

Establish standard means of scoring BC program implementations

Why do you need a baseline?

Generate consistent data from which meaningful benchmark analyses can be drawn:

Develop historical databank tagged in meaningful ways, e.g., by industry, by region, by the organization’s size, etc.

Get a Baseline with the Business Continuity Maturity Model®

Step 5: Create a Business Impact Analysis (BIA) &

an Executive Business Impact Analysis

(eBIA)

This approach allows you

to obtain the most

accurate Recovery time

Objectives (RTOs) by

comparing &

compromising both

responses.

Step 6:

Pilot your program before a full

enterprise launch

Resist the temptation to simply

‘get ‘er done’. Leave that to the

‘Cable Guy’.

Even when challenged by executives to an

Arbitrary deadline, make time to pilot the

method, tools, and your support model.

Step 7:

Set a clear charter with a Steering Committee

Yes, getting meetings with

leadership is never easy.

Ensure that your executive

sponsor has “the juice” to

keep his/her peers

attention & enthusiasm.

Set a charter that keeps the importance on supporting your

continuity & resilience program.

Step 8:

Build team engagement

Empower your team by

spending time & energy in

reinforcing & supporting

planners instead of trying to

scare or manage them.

Step 9:

Keep it consistent & holistic

Don't let each site

(division or business unit)

stand up its own

program. There needs to

be consistency and

cohesiveness.

Step 10:

Be prepared for an ISO certification audit

Undertaking an ISO certification audit is

expensive both in terms of people’s time

and $$$.

Make sure that you are versed on your

corporate competencies such as:

1. Leadership

2. Employee awareness

3. BC program structure

4. Program pervasiveness

5. Metrics

6. Resource commitment

7. External

About Virtual Corporation

Our offerings include:

• Business impact analysis (BIA)

• Site vulnerability assessments

• Crisis management

• Incident command exercise

• Continuity program design &

implementation

• IT disaster recovery

• BCMM® assessments & training

• Resiliency facilitation & planning

Virtual Corporation is a leading implementer

of enterprise resiliency & continuity

programs.

www.virtual-corp.com