1. Q-RADAR User Training BCM System End Users Training

2. BC Coordinators/Submitters –Risk Impact & Possibility rating Identification (RA) –Business Impact Analysis (BIA) & Business Continuity Plan (BCP) Identification –Submission for approval HOD/ Approvers –Review and approve/ Reject Risk/BCP Submissions User Access Rights

3. BIA Summary Info of Department BIA Summary info is captured under Company Info including Criticality, MTR, RTO, Current & Minimum Workforce. List of Primary Site & Alternate Site pre- defined by BCM Admin. Users to determine the High Level Recovery Strategy.

4. Identifying the Departmental MBCO Departmental MBCO needs to align to minimum one (1) Corporate MBCO. Corporate MBCO is pre-defined by BCM admin

5. Key Details of Business Function is Documented Key Business Function Data is captured and it needs to align to minimum one (1) Departmental MBCO.

6. Assess of Business Impact based on a major disaster Key Controls & Sub-controls are identified Based on the type of impacts, the business functions are further classified based on the criticality categorization matrix table RTO must be less or equal with MTD

7. Identification of Manual Workaround The Information of manual workaround for the BF is captured

8. Identification of IT Application Dependencies Identify the systems/applications that the department depends on to continue its business function

9. Identification of External/Internal Parties Dependencies Identify the Internal/External Parties that the department depends on to continue its business function

10. Insertion of Vital Records Identification of Vital Records

11. Overview of Business Function Prioritization Prioritize the Business Function by analyzing RTO

12. Identify Resources Requirements Identify the number of resources your department requires during normal circumstances and crisis period

13. Develop Call Tree Structure Drag the names to create a Call Tree Structure

14. Create Key Contact Create the contact details (external/internal) that is required for the recovery procedures Key BCM & Division Key Contact is for viewing and not for editing

15. Develop department split team Create the names of the staff required to support the business function if BCP is activated

16. Create Recovery Strategy Develop continuity strategy for the business function upon BCP activation

17. Submission for Review

18. Notify BCM Office once BIA/BCP input completed Notify BCM office for review once the input is completed

19. Submission for Approval

20. Submit for approval once BIA/BCP is reviewed Submit to HOD for approval after BCM office’ review

21. The BCP will become “Read-only” and can no longer be amended You can still “Withdraw” the submission until the approver has “Approved” or “Rejected” the submission BCC is advised to get the boss review first before submit for approval The HOD will be notified via Email and Dashboard on the need to review and approve/ reject the submission What happens when submits

22. Closing the loop: HOD Approval

23. Email & Dashboard notification for review Approver logging in will be notified to review

24. Approver can Approve of Reject Submission Approver will review and approve/ reject as appropriate

25. BCP Submission is permanently archived Submission history and approval/ rejections are permanently archived

26. What you get - Immediate BIA/BCP Report

27. View your department BIA/BCP Report Report

29. URL : bcm.bankrakyat.com.my ID : Your Staff ID Password : Your AD/Computer Password

30. Q & A SESSION