Business Continuity Planning MIKE FAITHFULL MBCI Corporate Continuity Manager Information Management Division
a-choo! yeah, very funny Dave.
Business Continuity Service Delivery Emergency Planning Emergency Response Risk Management Strategic Objectives The overlap Martin Barnard – Hammersmith & Fulham
EMERGENCY MANAGEMENT IT DISASTER RECOVERY FACILITIES MANAGEMENT HUMAN RESOURCES SECURITY ETC … KNOWLEDGE MANAGEMENT HEALTH & SAFETY RISK MANAGEMENT ENVIRONMENTAL MANAGEMENT SUPPLY CHAIN MANAGEMENT Business Continuity QUALITY MANAGEMENT
What is (a) risk? How do we measure it? How do we manage it?
RISK is … the possibility of more than one outcome occurring HM Treasury “Green Book” sensitivity to things you cannot control Prof.John Gordon – University of Hertfordshire the chance of something happening that will have an impact upon objectives. AS/NZS 4360 a function of probability and impact BCI et al the combination of the probability of an event and its consequences AIRMIC/ALARM Risk Management Standard uncertainty of outcome, whether positive opportunity or negative threat, of actions and events HM Treasury “Orange Book”
(hint: go here and hope it works) Pragmatic definition for BC planning …
THREAT VULNERABILITY EXPOSURE “At Risk”
Threats Countermeasures Risk analysis Risk management Risks Vulnerabilities Assets
What is (a) risk? How do we measure it? How do we manage it?
CCA Guidance notes – Annex 4f
Assessing risk Assessing risks Likelihood of Occurrence HighMediumLow Critical Significant Noticeable Risk Assessment Matrix Impact
(have another go) Pragmatic way to measure, with signposts to mitigation …
Seriousness Probability Errors 10,1 Flood 1,10 Fire 6,6 INSURE (Contingent) INSURE (Contingent) PREVENT CONTROL AND CONTAIN CONTROL AND CONTAIN ACCEPT THE RISK ACCEPT THE RISK ?
Probability Impact / Seriousness
Not ‘black and white’, but many shades of gr.. er Probability Impact / Seriousness
Seriousness Probability PREVENTIVE ACTION CONTROL AND CONTAIN CONTROL AND CONTAIN ACCEPT THE RISK ACCEPT THE RISK CONTINGENT ACTION CONTINGENT ACTION Probability Impact / Seriousness
Time ! What could a ‘disaster’ cost me …? £ Loss of business Cost of protection
Time-related costs Incident cost What could a ‘disaster’ cost me …? £ Time
Threat Fire “An ounce of prevention …” Likely cause Preventive action Contingent action Smoking Electrical faults Arson Install alarms Provide extinguishers Provide emergency exits Call Fire Service Purchase insurance... Ban it Regular maintenance Effective security measures
FunctionEmergency Planning Business Continuity Risk Management Crisis management Emergency plans Advice to business Disaster avoidance BIA Coordination of corporate services Service Risk Mgt / risk workshops Operational Risk Management