Business Continuity Awareness Steve Lambert Biscon Planning Ltd

The ‘What if’ approach to Business Continuity What is Business Continuity? …..loosely defined as the capability of the organisation to continue delivery of products or services at acceptable predefined levels following a disruptive incident. (Source: ISO 22301:2012)

The ‘What if’ approach to Business Continuity Business Continuity Plan The Plan is: A flexible recovery tool Designed to deal with impact not scenarios Comprehensive and detailed Intending to achieve an acceptable level of service in an acceptable timescale

The ‘What if’ approach to Business Continuity Business Continuity Plan - Contents Purpose and Scope Business Critical Activities Incident Management Response Business Continuity – Invocation Communications Roles & Responsibilities Recovery Processes / Strategies Standing Down the Plan Exercising, Maintenance and Review Appendices – Contacts, Activity Log etc

The ‘What if’ approach to Business Continuity Business Continuity Response Plans should primarily deal with impacts rather than cause

The ‘What if’ approach to Business Continuity Impacts / Resources Loss of People Loss of / access to Information and Data Loss of Buildings / Utilities Access to Facilities, Equipment & Consumables Access to Information Communication Technology (ICT) Systems (Voice & Data) Access to Transport Emergency Finance Loss of Partners, Suppliers and Supplies

The ‘What if’ approach to Business Continuity Strategies - People List of back up skilled specialists Multi-skill training of staff and contractors Separation of core skills Use of third parties Succession planning Documenting processes

The ‘What if’ approach to Business Continuity Strategies – Information & Data Including Hardcopy & Electronic Data Confidentiality (i.e. Password Protected, Locked Away) Integrity (from a reliable source) Availability (replicated, can be accessed remotely) Currency (up-to-date)

The ‘What if’ approach to Business Continuity Impacts – Information & Data

The ‘What if’ approach to Business Continuity Strategies – Buildings / Utilities Alternative premises within the organisation Alternative premises provided by other organisations (whether or not these are reciprocal arrangements) Emergency control centres Alternative premises provided by third-party specialists Working from home or at remote sites

The ‘What if’ approach to Business Continuity Strategies – Buildings / Utilities Back-up power (Generator / UPS) Bottled water Access to facilities at other premises or hiring portaloos Portable gas appliances (i.e. Calor)

The ‘What if’ approach to Business Continuity Strategies – Facilities, Equipment & Consumables Storage of additional supplies at another location Arrangements with third parties for delivery of stock at short notice Diversion of just-in-time deliveries to other locations Holding of materials at warehouses or shipping sites Transfer of sub-assembly operations to an alternative location which has supplies Identification of alternative/substitute supplies Increasing the number of suppliers Encouraging suppliers to have Business Continuity

The ‘What if’ approach to Business Continuity Strategies – ICT Systems Provision made within the organisation Services delivered to the organisation by a third party Cloud based systems Holding older equipment as emergency replacement or spares Contracted provision of equipment or recovery services

The ‘What if’ approach to Business Continuity Strategies - Transportation Identifying possible scenarios of logistic disruptions which may be caused directly by an incident Securing alternative logistic means and routes by taking account of traffic conditions and alternative means of transportation Arrangements with transport providers

The ‘What if’ approach to Business Continuity Strategies – Finance Arrangements for providing funds for emergency purchases, such as, food, accommodation, facilities, consumables and transport Reimbursement of staff expenses Major expenditure on, for example, rental or purchase of buildings and equipment Reviewing insurance arrangements

The ‘What if’ approach to Business Continuity Strategies – Suppliers / Partners Availability of alternative suppliers Streamlining procurement procedures when necessary Encouraging key suppliers to have Business Continuity Include suppliers in Business Continuity Exercises Financial health-checks on key suppliers

The ‘What if’ approach to Business Continuity Testing, Training and Embedding Testing Business Continuity Plan tested annually IT Disaster Recovery Plan test Training All response staff trained in procedures Embedding Embedding programme to raise awareness of Business Continuity for all staff

The ‘What if’ approach to Business Continuity Business Continuity Forum Aim To promote joint working and share knowledge & best practice between the public sector organisations, commercial enterprises and voluntary agencies in Herefordshire, in order to develop and maintain community resilience and preparedness for business interrupting incidents. Events October 2015 – Writing Business Continuity Plans November 2015 – Winter Planning February 2016 – ICT / Cyber / Business Continuity May 2016 – TBC – Global Business Continuity Awareness Week (BCAW) Ongoing Quarterly Events

The ‘What if’ approach to Business Continuity Contact Thank you for your time. Steve Lambert, Consultant