Business Continuity Program Orientation (insert presentation date) (This presentation is a template that requires adjustments to meet your needs)

Program Objectives Develop procedures to continue or recover critical business functions Develop framework for coordinated department response (Crisis Management) Develop appropriate IT recovery capabilities Ensure employee emergency response procedures are in place

Definitions Crisis Management is the coordination of enterprise- wide response activities during a major disruption Business Continuity plans address tactical measures to continue specific critical business functions Disaster Recovery plans address the restoration of Facilities or IT Emergency Action plans address human safety during an emergency (fire, natural disaster, etc.)

Scope If known, identify the following elements of the business that will be addressed: (business lines) (departments) (regions) (plans)

What we need to do to scope the project 1. Determine which of the elements below will be addressed in the program 2. Determine which elements of the organization will be addressed (departments, regions, business lines, etc.) IT Disaster Recovery Emergency Response Executives and Board Department Business Continuity Crisis Management

Project Steps 1.Project planning & organization 2.Prioritizing business activities 3.Analyzing threats and risks 4.Identifying response options 5.Developing plans 6.Implementation (training & exercising) 7.Maintaining the program

Key Actions – Project Planning & Organization 1. Project planning & organization 2. Prioritizing business activities 3. Assessing threats and risks 4. Identifying response options 5. Developing plans 6. Implementation (training & exercises) 7. Maintaining the program 1.Assign roles – BC Coordinator, Executive Sponsor, BC Committee 2.Refine the initial scope and objectives 3.Develop the project plan 1.Assign roles – BC Coordinator, Executive Sponsor, BC Committee 2.Refine the initial scope and objectives 3.Develop the project plan

Key Actions – Prioritizing Business Activities (Business Impact Analysis) 1. Project planning & organization 2. Prioritizing business activities 3. Assessing threats and risks 4. Identifying response options 5. Developing plans 6. Implementation (training & exercises) 7. Maintaining the program 1.Gather information from each department to define critical functions 2.Achieve agreement with stakeholders before moving forward 1.Gather information from each department to define critical functions 2.Achieve agreement with stakeholders before moving forward

Key Actions – Threat & Risk Assessment 1. Project planning & organization 2. Prioritizing business activities 3. Assessing threats and risks 4. Identifying response options 5. Developing plans 6. Implementation (training & exercises) 7. Maintaining the program 1.Conduct key site risk assessment(s) 2.Conduct regional risk assessment(s) This information will help us prioritize further, and inform us of what can cause harm 1.Conduct key site risk assessment(s) 2.Conduct regional risk assessment(s) This information will help us prioritize further, and inform us of what can cause harm

Key Actions – Viable Response Options 1. Project planning & organization 2. Prioritizing business activities 3. Assessing threats and risks 4. Identifying response options 5. Developing plans 6. Implementation (training & exercises) 7. Maintaining the program We need to identify and agree on what response options are available for the use when developing plans

Key Actions – Plan Development 1. Project planning & organization 2. Prioritizing business activities 3. Assessing threats and risks 4. Identifying response options 5. Developing plans 6. Implementation (training & exercises) 7. Maintaining the program 1.Department business continuity 2.Enterprise Crisis Management 3.IT Disaster Recovery 4.Emergency Actions Plan 1.Department business continuity 2.Enterprise Crisis Management 3.IT Disaster Recovery 4.Emergency Actions Plan

Key Actions – Program Implementation 1. Project planning & organization 2. Prioritizing business activities 3. Assessing threats and risks 4. Identifying response options 5. Developing plans 6. Implementation (training & exercises) 7. Maintaining the program 1.Conduct initial orientation training for key stakeholders 2.Conduct initial exercise(s) for key stakeholders 1.Conduct initial orientation training for key stakeholders 2.Conduct initial exercise(s) for key stakeholders

Key Actions – Maintaining the Program 1. Project planning & organization 2. Prioritizing business activities 3. Assessing threats and risks 4. Identifying response options 5. Developing plans 6. Implementation (training & exercises) 7. Maintaining the program 1.Conduct program reviews and updates 2.Conduct plan reviews and updates 3.Conduct periodic exercises 1.Conduct program reviews and updates 2.Conduct plan reviews and updates 3.Conduct periodic exercises

Additional Slides Add additional information: Next steps, Q&A, etc.