•  Print

Business Continuity Management (BCM) is not just about reacting to an incident or a crisis, nor is it just a professional specialist discipline. BCM is now regarded as a corporate business activity that the business owns and drives and is applicable to all organizations. BCM can provide the strategic and operational framework to review the way it provides its products and services and increase its resilience to disruption interruption or loss. The key to recovery is time. The organization which recovers in the shortest possible time will mitigate its losses to the optimum.

Anyone who tells you that your IT network is 100% secure is greatly mistaken. IT Security is a constantly moving target, and unfortunately, this target is being manipulated by those whose sole aim is to cause you harm. BS25999-1/2 Code of Practice, the essential guide which establishes the principles, terminology and process of BCM has now been replaced (September 2012) by ISO-22301 this international standard now covers the activities and deliverables applicable in establishing a BCM process and Disaster Recovery best practice.

By the end of this course, delegates will be able to:

· Have the tools and knowledge required to conduct a threat and vulnerability assessment

· Identify and select cost-effective BCM strategies for critical functions, processes and IT Disaster Recovery systems

· Have a solid understanding of BCM & IT DR Best Practices

· Have the tools and knowledge required to plan and coordinate an effective Crisis Management

· Know how to maintain support and commitment for the Business Continuity & IT Disaster Recovery Program

· Learn how to initiate and manage your business continuity program

· Learn proven techniques to assess and reduce risk and impact

· Identify critical risks and analyze their impact

· Learn how to write effective business continuity and disaster recovery plans

· Examine real-life case studies & learn how to survive a crisis

· Ensure your organizational arrangements satisfy the 24 new international standards for BCM & IT Security and Disaster Recovery

· Review the role of insurance and appreciate its limitations

· Understand why many organization plans fail and how to avoid this

· Enable the organization to identify critical risks and analyze their impact

· Agree cost justifications on recovery strategies for those identified critical business processes & functions

Management of business continuity planning and disaster recovery functions, internal and external auditors, IT and telecommunication managers, administrative and operational heads, planners & IT Personnel, network system administrators network engineers, IT security and IT security auditing, technical IT management, directors & managers, corporate finance officers & strategic planners

Business Continuity Management (BCM) fundamentals

· Introduction to Business Continuity Management

· Business Impact Analysis (BIA) with examples

· Identifying critical business processes and impact mitigation strategies

· Establishing the maximum tolerable downtime of critical processes

· The BIA (Risk Assessment)

· Identify, define and evaluate internal and external business risks

· Practical exercise

· BIA and Risk Assessment

Developing the Strategy

· Developing BCM plans with Recovery Point Objectives (RPOs) & Recovery Time Objectives (RTOs)

· Establishing the worst case scenario, for which strategies need to be developed

· Identifying recovery strategies, for critical business processes

· Determining order-of-magnitude costs and evaluating the relative merits for each strategy, premises and essential equipment back-ups and recovery strategies

· Establishing the Business Continuity and Recovery teams

· Who are the key personnel?

· Who has the potential to become involved?

Effective and Efficient Planning

· Crisis Management overview

· Implementing an Incident Command Framework

· Emergency Centre Management

· Reputation & Media Management, must do list

· Business Continuity Management

· Case study and Exercise

IT Disaster Recovery Phase

· Criteria for determining whether a potential crisis situation exists

· First task - Is there an actual or potential threat to human safety?

· Do you adopt an Evacuation or a Shelter policy?

· Human Factors in BCM

· Examine Disaster Recovery activities and strategies

· Involvement of external agencies, what is it they want to know

· Consider the implications of cyber hacking of networks

Keeping the Plan Alive

· Maintaining, administering, auditing & evaluating Business Continuity plans

· Importance of a test program and validating methods

· How to validate your plan, your arrangements and your teams

· Who should be on your exercise planning team?

· When and how to de-brief and critique?