Q-RADAR User Training BCM System End Users Training

BC Coordinators/Submitters –Risk Impact & Possibility rating Identification (RA) –Business Impact Analysis (BIA) & Business Continuity Plan (BCP) Identification –Submission for approval HOD/ Approvers –Review and approve/ Reject Risk/BCP Submissions User Access Rights

BIA Summary Info of Department BIA Summary info is captured under Company Info including Criticality, MTR, RTO, Current & Minimum Workforce. List of Primary Site & Alternate Site pre- defined by BCM Admin. Users to determine the High Level Recovery Strategy.

Identifying the Departmental MBCO Departmental MBCO needs to align to minimum one (1) Corporate MBCO. Corporate MBCO is pre-defined by BCM admin

Key Details of Business Function is Documented Key Business Function Data is captured and it needs to align to minimum one (1) Departmental MBCO.

Assess of Business Impact based on a major disaster Key Controls & Sub-controls are identified Based on the type of impacts, the business functions are further classified based on the criticality categorization matrix table RTO must be less or equal with MTD

Identification of Manual Workaround The Information of manual workaround for the BF is captured

Identification of IT Application Dependencies Identify the systems/applications that the department depends on to continue its business function

Identification of External/Internal Parties Dependencies Identify the Internal/External Parties that the department depends on to continue its business function

Insertion of Vital Records Identification of Vital Records

Overview of Business Function Prioritization Prioritize the Business Function by analyzing RTO

Identify Resources Requirements Identify the number of resources your department requires during normal circumstances and crisis period

Develop Call Tree Structure Drag the names to create a Call Tree Structure

Create Key Contact Create the contact details (external/internal) that is required for the recovery procedures Key BCM & Division Key Contact is for viewing and not for editing

Develop department split team Create the names of the staff required to support the business function if BCP is activated

Create Recovery Strategy Develop continuity strategy for the business function upon BCP activation

Submission for Review

Notify BCM Office once BIA/BCP input completed Notify BCM office for review once the input is completed

Submission for Approval

Submit for approval once BIA/BCP is reviewed Submit to HOD for approval after BCM office’ review

The BCP will become “Read-only” and can no longer be amended You can still “Withdraw” the submission until the approver has “Approved” or “Rejected” the submission BCC is advised to get the boss review first before submit for approval The HOD will be notified via and Dashboard on the need to review and approve/ reject the submission What happens when submits

Closing the loop: HOD Approval

& Dashboard notification for review Approver logging in will be notified to review

Approver can Approve of Reject Submission Approver will review and approve/ reject as appropriate

BCP Submission is permanently archived Submission history and approval/ rejections are permanently archived

What you get - Immediate BIA/BCP Report

View your department BIA/BCP Report Report

URL : bcm.bankrakyat.com.my ID : Your Staff ID Password : Your AD/Computer Password

Q & A SESSION