implementing a bcm programme - epicc · 2016-02-26 · this session focuses on the “softer”...
TRANSCRIPT
![Page 1: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/1.jpg)
1
Implementing a BCM Programme
Russ Stewart UK Head of Continuity Safety & Security EuropeKPMG LLP
EPICC Vancouver BC April 2009
![Page 2: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/2.jpg)
2
Implementing a BCM ProgrammeImplementing a BCM Programme
Lots of good stuff available via DRI and BCI on the content and deliverables of an effective BCM programme.
This session focuses on the “softer” side of BCM implementation, with practical tips on how to ensure delivery and effective on-going management.
Lots of good stuff available via DRI and BCI on the content aLots of good stuff available via DRI and BCI on the content and nd deliverables of an effective BCM deliverables of an effective BCM programmeprogramme. .
This session focuses on the This session focuses on the ““softersofter”” side of BCM side of BCM implementation, with practical tips on how to ensure delivery implementation, with practical tips on how to ensure delivery and effective onand effective on--going management. going management.
![Page 3: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/3.jpg)
3
Implementing a BCM ProgrammeImplementing a BCM Programme
Set of interdependent projects.
12 – 18 months + timescales
Maintenance and management.
Set of interdependent projects. Set of interdependent projects.
12 12 –– 18 months + timescales18 months + timescales
Maintenance and management. Maintenance and management.
![Page 4: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/4.jpg)
4
Trusted Advisor Trusted Advisor
David H. Maister, Charles H. Green and Robert M. Galford 2000
![Page 5: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/5.jpg)
5
Trusted AdvisorTrusted Advisor
Most of the rest of this session is about achieving this status through BCM programme delivery.
• People listen to what you ( and team say )
• Unsolicited requests
Most of the rest of this session is about achieving this statMost of the rest of this session is about achieving this status us through BCM through BCM programmeprogramme delivery.delivery.
•• People listen to what you ( and team say ) People listen to what you ( and team say )
•• Unsolicited requests Unsolicited requests
![Page 6: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/6.jpg)
6
Trusted AdvisorTrusted Advisor
• Advise
• Develop policy
• Implement systems and procedures
• Training & awareness
• Audit
•• AdviseAdvise
•• Develop policyDevelop policy
•• Implement systems and proceduresImplement systems and procedures
•• Training & awarenessTraining & awareness
•• Audit Audit
![Page 7: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/7.jpg)
7
Risk Repository Risk Repository
![Page 8: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/8.jpg)
8
Risk Repository Risk Repository
• People offload risk to you and your team
• Ownership
•• People offload risk to you and your team People offload risk to you and your team
•• Ownership Ownership
![Page 9: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/9.jpg)
9
Terms of Reference Terms of Reference
![Page 10: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/10.jpg)
10
Terms of Reference Terms of Reference
A concise statement, agreed by the governance structure, that kicks off the programme and is an opportunity to actively engage key people.
Some considerations & characteristics :
• capability & maturity : set expectations
• identify scope, objective and priorities
• promote common understanding of what will be delivered and how
• …………evidence on the organisation’s commitment
![Page 11: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/11.jpg)
11
Terms of Reference Terms of Reference
• BACKGROUND
• OBJECTIVES
• SCOPE
• functional, organisational, geographical
• CONSTRAINTS & DEPENDENCIES
• legal & regulatory
• other programmes
• APPROACH
• phasing, deliverables, reviews
• ROLES & RESPONSIBILITIES
![Page 12: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/12.jpg)
12
BCM Programme Governance
BCM Programme Governance
![Page 13: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/13.jpg)
13
Governance Governance
• PROGRAMME SPONSOR
• executive level
• responsible for delivery of the benefits
• PROGRAMME STEERING GROUP
• senior people from departments involved
• have authority to make BCM related decisions & prioritise
• rapid issue resolution
![Page 14: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/14.jpg)
14
Delivery Delivery
![Page 15: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/15.jpg)
15
DeliveryDelivery
Business Continuity
Risk Management
Crisis Management
Business Recovery
![Page 16: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/16.jpg)
16
Characteristics of crisis management …• Life & Limb• Reputation• Minutes/Hours• Survival focus
Most important decisions made with limited information
Readiness requirement:• too late for manuals• need to regularly exercise
Escalation to a Central Crisis Management Team• media handling• emergency services liaison• communications cascades
Delivery Delivery
Crisis Mgt
![Page 17: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/17.jpg)
17
DeliveryDelivery
To recover business functions
Based on an agreed firm wide strategy…
Survival Mode / Some efficiency loss
Recovery plans in detail
…after the initial crisis has been managed
Business Rec.
Readiness / Exercised
Components- Business Plans- ICT- Facilities- HR
![Page 18: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/18.jpg)
18
DeliveryDelivery
Business ContinuityReduce risk through resilience
Built into the culture of the organisation
Embed in normal processes
Lessen Impact
![Page 19: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/19.jpg)
19
DeliveryDelivery
Don’t disappear for 18 months then deliver a tsunami of output.
![Page 20: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/20.jpg)
20
Delivery Delivery
Enhanced Crisis Mgt.
Basic Disaster Recovery Readiness
Risk/ Impact Mitigation
Basic Crisis Mgt.
Enhanced Disaster Recovery Readiness
![Page 21: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/21.jpg)
21
Delivery Delivery
Enhanced Crisis Mgt.
Basic Disaster Recovery Readiness
Risk/ Impact Mitigation
Basic Crisis Mgt.
Enhanced Disaster Recovery Readiness
![Page 22: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/22.jpg)
22
BCM – Basic Crisis Management BCM – Basic Crisis Management
A basic level of crisis management readiness can usually be delivered within a few weeks.
• Clearly defined crisis management roles and responsibilities
• assess / decide / communicate / execute / escalation
• Capability for rapid communication between crisis team members
• eg a pre-set conference call
• Capability for mass communication to your people
• call cascade
• freephone numner
• Capability to evacuate your building (…invacuate also if possible)
• Simple crisis protocol published
![Page 23: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/23.jpg)
23
BCM – Basic Business Recovery BCM – Basic Business Recovery
A basic level of recovery management readiness can usually be delivered within a few months.
• Appoint business continuity co-ordinators (BCC) for each department
• BCC to identify individuals for recovery roles within their department
• do not have to be trained – simply aware of their role
• Standard template recovery checklist for a “worst-case” scenario
• Agree a simple protocol to convene recovery teams
At the very least, in response to a recovery situation, the teams can get together to plan and execute a level of organised activity.
![Page 24: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/24.jpg)
24
Delivery : Business Impact Analysis (BIA) Delivery : Business Impact Analysis (BIA)
A “quick and dirty” initial BIA can be delivered by means of a few short interviews with programme sponsor and steering group members. This initial BIA can be used to develop basic crisis management an recovery readiness.
A full blown BIA takes time. Its results can be fed back into the process for transforming “basic” recovery plans into “enhanced”.
![Page 25: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/25.jpg)
25
CommunicationCommunication
![Page 26: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/26.jpg)
26
Communication Communication
The communication of the BCM programme is a hugely important element of the undertaking.
If the organisation has an internal communications resource then such should be actively engaged. Considerations :
• Understanding of the “voicing” of the organisation
• Understanding of formal and informal organisation structures & relationships
• Clarity of message
• Consistency
![Page 27: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/27.jpg)
27
Communication : Relationship Management Communication : Relationship Management
In the course of a BCM programme a large number of people in theorganisation will be involved.
Tracking their involvement, and the parallel communication trails, supports effective communications and can greatly enhance the credibility of the programme.
![Page 28: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/28.jpg)
28
Benefit DeliveryBenefit Delivery
![Page 29: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/29.jpg)
29
Benefit Delivery Benefit Delivery
With a bit of lateral thought :
• Insurance
• IT infrastructure & operations
• Building, M&E maintenance regimes
• Client / customer relationships
![Page 30: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/30.jpg)
30
Benefit Delivery : BIA Benefit Delivery : BIA
BIA should be a great resource :
• Representation of how organisation works
• Ideally in a re-useable format
![Page 31: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/31.jpg)
31
Management Management
![Page 32: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/32.jpg)
32
Management Management
Not just maintenance. Management of change.
• Be commercial
• Innovate
• Cost reductions & service level improvements
• Training & awareness cycle
• cohorts
![Page 33: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/33.jpg)
33
Trusted Advisor Trusted Advisor
Risk Repository ( not )
Governance & Terms of Reference
Deliver – short and long term
Programme Communication
Benefits Delivey – collateral
Management
![Page 34: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/34.jpg)
34
Questions Questions
![Page 35: Implementing a BCM Programme - EPICC · 2016-02-26 · This session focuses on the “softer” side of BCM implementation, ... Business Impact Analysis (BIA) A “quick and dirty”](https://reader034.vdocument.in/reader034/viewer/2022050110/5f47866074078f06b3640c56/html5/thumbnails/35.jpg)
35
Implementing a BCM Programme
Russ Stewart UK Head of Continuity Safety & Security EuropeKPMG LLP
EPICC Vancouver BC April 2009