In times where most organisations have become highly dependent on information and
information systems, each should pose her/himself the questions:
- Can I estimate the impact a disaster or a major outage would have on our company?
- Can I define maximum allowable downtimes for our most critical business processes/activities?
- Is our organisation prepared to face unforeseen events that can disrupt our most
critical business processes?
- Is our infrastructure prepared to face unforeseen events that can disrupt our most
critical business processes?
If in doubt about any of the above answers, an organisation might need to seek consultancy
in order to protect the continuity of its business operations.
Business Continuity Management is the overall management process that results in
the creation of plans that document the steps to face a crisis situation (crisis
management plan), to resume the business operation (business continuity plan) and
to recover the ICT environment (disaster recovery plan) (BCM defined according to
BS25999).
Back to top
In order to deliver business continuity and disaster recovery plans the process
goes through various stages:
- identification of potential disruption scenarios to an organisation's ability to
function;
- identification of the impact those threats, if materialized, might have on business
operations;
- building resilience and recovery against the disruption scenarios by defining, in
dialogue with the customer, possible resumption strategies;
- implementation of chosen strategies at customer site;
- create awareness , organise training, periodic reviews to ensure an actual situation
and readiness of the continuity plan at all times.
Back to top
A detailed Business Continuity Management Plan should contain the following elements:
- a Crisis Management Plan (documents actions to be taken during a crisis situation
and who takes responsibility for those actions);
- a Crisis Communication Plan (deals with communication to employees as well as communication
to the outside world);
- a Business Resumption Plan (explains in which order business critical activities
need to be resumed);
- a Disaster Recovery Plan (ICT infrastructure) (explains which actions need to be
taken in which order to be able to restart business critical activities while respecting
the RTOs as dictated by the business);
- a Logistics Plan (building infrastructure) (documents necessary actions to be taken
if personnel needs to be relocated to an alternative location).
Back to top
The different stages and/or deliverables of BCM can be implemented separately or
as one package of services to meet your specific needs.
Back to top