Business Continuity Planning April 29, 2005 Edmonton Sean Lawson, CBCP Linc Group Corp.

Resources DRI Canada – Business Continuity Institute – Disaster Recovery Information Exchange - West ( Disaster Recovery Journal – Laye, John. Avoiding Disaster, 2002

Business Continuity Planning The process of developing advance arrangements and procedures that enable an organization to respond to an event in such a manner that critical business functions continue with planned levels of interruption or essential change. – DRI International SIMILAR TERMS: Contingency Planning, Disaster Recovery Planning, Business Resumption Planning, Continuity of Operations Planning.

BCP is about managing risk Employees Market ForcesTechnology Operations Revenue Stakeholders/ Customers Legislation Suppliers

BCP is about managing risk Employees Market ForcesTechnology Operations Revenue Stakeholders/ Customers Legislation Suppliers

Threats Y2K 9/11 terrorist attacks Anthrax - Bio-terrorism SARS Power Black Out Enoch gas well blow-out Edmonton Floods Avian Influenza (verge of a pandemic) Direct and Indirect effects

Risks Injury/deaths (staff, public, stakeholders) Financial losses (revenue, cash flow) Lost customers, suppliers, partners Damaged reputation Lost equipment, property, facilities Legal liability

Source: Contingency Planning Research, Inc. Frequency vs. Likelihood

Source: Contingency Planning Research, Inc. Costs of an Outage

Source: Contingency Planning Research, Inc. What if we’re not prepared Consequences of a major business disruption in the absence of a BCP Plan: only 43% of businesses without plans resume operations after a disabling disaster; of these, only 12% are still in operation two years after a disabling disaster.

BCP - Professional Practices 1. Project Initiation and Management 2. Risk Evaluation and Control 3. Business Impact Analysis 4. Developing Business Continuity Strategies 5. Emergency Response and Operations 6. Developing and Implementing Business Continuity Plans 7. Awareness and Training Programs 8. Maintaining and Exercising Business Continuity Plans 9. Public Relations and Crisis Communication 10. Coordination with Public Authorities

State of the BCP Industry Growing trend toward standardization. Formalized education and training Certified practitioners Standards and Legislation  PIPA  ISO  NFPA 1600 Increasing social and corporate awareness. Personal preparedness Corporate responsibility Business best practice

Fed/Prov/Local Activities Federal Emergencies Act, Emergency Preparedness Act PSEPC (OCIPEP) NERS Provincial Disaster Services Act and Regulations GOA Planning and Coordination  EMA (and EPOs)  Departmental BCP Municipal Disaster Services Act and Regulations Engaging community partners Planning

BCP Benefits BCP is a “best practice” for any organization Resilient to minor and major events Increased capacity to meet operational surges Clarifies priorities Engages employees and builds confidence Immediate value Understand your organization Identifying synergies within your operations Identify threats Feed priorities into strategic planning

What to do next? Get affiliated. Get certified. Get planning.

Sean Lawson, CBCP Linc Group Corporation