7/27/2019 BCM Action Plan

1/3

ACTIVITIES INVOLVED IN THE BUSINESS CONTINUITY MANAGEMENT

Appoint or nominate an individual at management board level to beaccountable for BCM

Appoint one or more individuals with responsibility for taking the programmeforward.

BUSINESS IMPACT ANALYSIS (BIA)

I. List the key products and services your organization provides which ifdisrupted for any reason will have the greatest impact.

1. ability to capture customer orders for our products

2. ability to deliver the customer orders for our products3. ability to supply invoices / documents to customers

4. able to pay our creditors5. able to communicate effectively with staff, our sites, customers, suppliers and

statutory authorities

II. Identify the maximum length of time that can manage a disruption toeach of the key products and services without it threatening yourorganisations viability, either financially or through a loss of reputation(this is often referred to as the Maximum Tolerable Period of Disruptionor MTPD).

1. ability to capture customer orders for our products - 2 days2. ability to deliver the customer orders for our products - 1 week

3. ability to supply invoices / documents to customers - 2 days

4. able to pay our creditors - 1 week

5. able to communicate effectively with staff, our sites, customers, suppliers andstatutory authorities - 6 hours

III. Set the point in time at which each key products and services wouldneed to be resumed in the event of a disruption (this is often referred toas the Recovery Time Objective or RTO).

1. ability to capture customer orders for our products - 12 Hours2. ability to deliver the customer orders for our products - 2 days

3. ability to supply invoices / documents to customers - 24 hours4. able to pay our creditors - 3 days5. able to communicate effectively with staff, our sites, customers, suppliers and

statutory authorities - 3 hours

IV. Document the critical activities that are required to deliver your keyproducts and services.

7/27/2019 BCM Action Plan

2/3

Production

Inspection

Packing & LabelingIT

Transportation

Communication phone, fax, internet, courier

V. quantify the resources required over time to maintain the criticalactivities at an acceptable level and to meet the RTO

people;premises;technology;information; andsupplies and partners

RISK ASSESSMENT

Identify the risk

Loss of staff

Loss of systems (IT and telecommunications)

Loss of utilities eg water, gas or electricity

Loss of, or access to, premises

Loss of key suppliers

Disruption to transport

List what arrangements you currently have in place to prevent or reduce the

likelihood of the risk occurring.

List what arrangements you could put in place to prevent or reduce the riskon your organisation.

Determine the likelihood & impact of the risk

you will now be able to rank the risks and make an informed decision aboutwhat action to take.

Treat use ofBCM to reduce disruption

Tolerate

Transfer This might be done by conventional insurance or contractualarrangements,

Terminate suspend or terminate the service, product, activity,function or process.

7/27/2019 BCM Action Plan

3/3

Determine BCM StrategyDevelopment & Implementation of BCM