1. Business Continuity Planning April 29, 2005 Edmonton Sean Lawson, CBCP Linc Group Corp.

2. Resources DRI Canada – www.dri.cawww.dri.ca Business Continuity Institute – www.thebci.org www.thebci.org Disaster Recovery Information Exchange - West (www.drie-west.org)www.drie-west.org Disaster Recovery Journal – www.drj.orgwww.drj.org Laye, John. Avoiding Disaster, 2002

3. Business Continuity Planning The process of developing advance arrangements and procedures that enable an organization to respond to an event in such a manner that critical business functions continue with planned levels of interruption or essential change. – DRI International SIMILAR TERMS: Contingency Planning, Disaster Recovery Planning, Business Resumption Planning, Continuity of Operations Planning.

4. BCP is about managing risk Employees Market ForcesTechnology Operations Revenue Stakeholders/ Customers Legislation Suppliers

5. BCP is about managing risk Employees Market ForcesTechnology Operations Revenue Stakeholders/ Customers Legislation Suppliers

6. Threats Y2K 9/11 terrorist attacks Anthrax - Bio-terrorism SARS Power Black Out Enoch gas well blow-out Edmonton Floods Avian Influenza (verge of a pandemic) Direct and Indirect effects

7. Risks Injury/deaths (staff, public, stakeholders) Financial losses (revenue, cash flow) Lost customers, suppliers, partners Damaged reputation Lost equipment, property, facilities Legal liability

8. Source: Contingency Planning Research, Inc. Frequency vs. Likelihood

9. Source: Contingency Planning Research, Inc. Costs of an Outage

10. Source: Contingency Planning Research, Inc. What if we’re not prepared Consequences of a major business disruption in the absence of a BCP Plan: only 43% of businesses without plans resume operations after a disabling disaster; of these, only 12% are still in operation two years after a disabling disaster.

11. BCP - Professional Practices 1. Project Initiation and Management 2. Risk Evaluation and Control 3. Business Impact Analysis 4. Developing Business Continuity Strategies 5. Emergency Response and Operations 6. Developing and Implementing Business Continuity Plans 7. Awareness and Training Programs 8. Maintaining and Exercising Business Continuity Plans 9. Public Relations and Crisis Communication 10. Coordination with Public Authorities

12. State of the BCP Industry Growing trend toward standardization. Formalized education and training Certified practitioners Standards and Legislation  PIPA  ISO 17799  NFPA 1600 Increasing social and corporate awareness. Personal preparedness Corporate responsibility Business best practice

13. Fed/Prov/Local Activities Federal Emergencies Act, Emergency Preparedness Act PSEPC (OCIPEP) NERS Provincial Disaster Services Act and Regulations GOA Planning and Coordination  EMA (and EPOs)  Departmental BCP Municipal Disaster Services Act and Regulations Engaging community partners Planning

14. BCP Benefits BCP is a “best practice” for any organization Resilient to minor and major events Increased capacity to meet operational surges Clarifies priorities Engages employees and builds confidence Immediate value Understand your organization Identifying synergies within your operations Identify threats Feed priorities into strategic planning

15. What to do next? Get affiliated. Get certified. Get planning.

16. Sean Lawson, CBCP Linc Group Corporation sean.lawson@attglobal.net 780-964-1049