ISACA Accra, Kumasi Workshop September 2013 Business Continuity Management Compiled and presented by: Eric Magnusen ( BCM Consultant) BCM-Consult, Al Faslu Jadeed

Why the talk about business disruption There has been some big wake up calls over the past decade : –WTC in 2001 –Indonesian Tsunami in 2004 –Hurricane Katrina in 2005 –Haiti in 2010 –‘Ash Clouds’ in 2010 –Catastrophic Earthquake and Tsunami in Japan in 2011 –Other recent events

The examples may be remote… The examples may have occurred in geographical locations some how remote from yours but the impact have been felt far and wide: – the impact to value chain – ‘global village’ dynamics

The examples in Ghana…(major ones only) Kumasi Stadium Lights mid 2012 Melcom building event

Business Continuity Planning A holistic management framework for building organisational resilience which aim is to protect products and services and maintaining stakeholder value at all times. Effective implementation ensures the business entity’s continuity of service and support for customers and helps maintain its viability before, during and after an incident

Why you need a BC Plan right away Survival of your business depends on it (Its just good business to have a good BC Plan) Protect Life and Property (Assets) Protect Stakeholder Value (shareholder, customers. employees, regulator Compelling business case (minimum standards) Compliance issue (often with high costs for non- compliance)

How will BC Plan help your business Maintain service to your clients often when the competition is unable to do so Helps identify and mitigate risks before crisis occurs Minimise decision-making time in a crisis. Instill a culture of calm preparedness and action for whenever a drastic event occurs Provide for an orderly and expedited recovery Protect employees + assets and minimise losses

How will BC Plan help your business (2) Ensures organisational stability Reduces reliance on only a few key personnel (Plan for People) Reduces potential legal liabilities. Preserve the ability to meet customer expectations in a wide range of circumstances including SLAs Safeguard reputation and brand Meet Compliance requirements

How will BC Plan help your business (3) Maintain or gain competitive advantage due to swift and effective response Gain early warning of and take corrective action on any weaknesses or vulnerabilities in your business Realise improvement in insurance costs and coverage In summary - Its just good business. A good BC Plan helps you maintain customer service, protect employees and assets and protect the bottom-line

Business Continuity Planning involves: Cuts across every aspect of the organisation embedding the strategies within its culture A comprehensive risk assessment process Clearly defined recovery strategies and plans documented and well rehearsed. IT systems recovery (hardware/applications/network) Plan for People Operations (Products and Services) recovery Crisis Management and Crisis communications Incident Management

Some reasons for no action… Combination of: corporate apathy lack of support from top executives seen as optional exercise too costly time consuming too complicated absence of regulatory enforcement

Outsourced Functions: Who has the overall responsibility for BCM compliance

Think about this… Kumasi Stadium light crisis: Could that have been avoided?

Remember – BC Planning is required Right Away

Implementation… Policy and Program Management:

Implementation… Embedding BCM in the Organisation Structure:

Implementation… Technical BCM study of the organisation – data collection and analysis :

Implementation… Determining BC Strategy – Select best Strategies and Consolidate Resources:

Implementation… Develop & Implement Responses

Implementation… Test Exercises

Implementation… Document review and Assurance Audits

BCM Process… PREDICT PLAN PERFORM

BCM Consultancy (Advisory/Planning/Implementation/Rehe arsing) Eric Magnusen President/CEO, BCM-Consult Al Faslu Jadeed Ltd 37 Royal Palm Road, Baatsonaa, Comm 18, Tema Tel: / /

Questions ? Thank You