You're about to create your best presentation ever

Business Continuity Plan Powerpoint Template

Create your presentation by reusing a template from our community or transition your PowerPoint deck into a visually compelling Prezi presentation.

BUSINESS CONTINUITY PLAN

Transcript: Business Continuity Plan GOES HERE YOUR LOGO Training Organizational resilience with Capability for effective response that safeguards the interest of staff, owners and clients Business Continuity Plan What? BSM response BSM will: 01. 02. 03. Test process and implement procedures Review and Implement Procedures Communicate and Promote BCM Ensure in critical failure or disruption, BSM deliver services Purpose Why? Scope The plan is aimed at any person who works for BSM Scope ORG. CHART BCP TEAM Maxim Tsernosjov Business Continuity Manager Nikolaos Kretsis Managing Director Irene Petallides Fleet Manager Loizos Nicolaou Fleet Manager Sofronis Theodosiou Fleet Personnel Manager Leonard Rodriguez LPSQ Superintendent Miguel Garcia Technical Superintendent Elias Eliades IT Manager To determine: When? INCIDENT OCCURS Department business recovery arrangements Maintain up to date recovery strategy Who to notify How to respond Activity 1 Communications Records in PAL / update BCP if required All External communication relating to disruption business activity are business critical. Activity 2 BC committee Data protection Policy applies Take charge of practical implementation Support BCM in his role Identify Key Staff to assist Have access to emergency contact information Activity 3 IT Recovery Plan Resp. IT manager Provide access to all staff to Skype FB, PAL, Outlook Protect local Server Protect application needs Branch Locations BSM Cyprus Records in LPSQ PAL Module Annual Table top exercise / Staff Familiarization Bi annual fleet team working from home Identifying areas of Improvements SMART Actions TRAINING DRILLS & TRAINING

Business Continuity Plan

Transcript: Definition of Emergency Procedures Emergency procedures are predefined actions and protocols established to respond to various types of emergencies effectively. These procedures ensure that personnel are aware of their roles and responsibilities during an incident, facilitating a swift and coordinated response to minimize impact. Importance of Crisis Management Crisis management is critical as it helps organizations prepare for, respond to, and recover from unexpected incidents. Effective crisis management minimizes disruption, protects assets, and preserves the organization's reputation while ensuring the safety of personnel. Emergency & Crisis Procedures Overview of Incident Command Structure The incident command structure provides a clear hierarchy and communication flow during emergency situations. This structure enables quick decision-making and effective coordination among various emergency response teams, ensuring that all actions align with the overall response strategy. Key Roles and Responsibilities Business Continuity Plan Overview Key roles in emergency procedures include Incident Commander, Safety Officer, Public Information Officer, and other designated personnel who are responsible for specific actions during an incident. Clearly defined roles help ensure accountability and efficiency in the response effort. The Business Continuity Plan (BCP) is a strategic framework that ensures an organization can continue operations during and after a crisis. It encompasses essential procedures, resources, and responsibilities designed to mitigate risks and facilitate recovery. Incident & Recovery Phase A structured approach to managing the incident and recovery processes to ensure business continuity. Recovery Planning Post-Incident Review 4.2.1 Incident Detection 4.2.2 Initial Response Incident detection involves identifying and reporting incidents promptly to initiate the response process effectively. The initial response focuses on immediate actions taken to control the situation and mitigate impacts, including activating the incident command structure. Recovery planning outlines strategies for restoring operations and services post-incident, ensuring minimal disruption to business processes. Post-incident review involves analyzing the incident response and recovery efforts to identify lessons learned and improve future readiness. Establishing Command Structure Incident Command & Quick Reference Roles of Incident Commanders Quick Reference for Emergency Contacts Business Continuity Plan Emergency and Crisis Procedures for Effective Incident Management Loss Preventive & Control Measures Implementing structured strategies to mitigate risks and ensure organizational resilience during emergencies. Risk Assessment Identifying potential threats to the organization and evaluating their impact on operations. Preventive Strategies Developing measures to minimize the likelihood of incidents occurring and enhance preparedness. Control Measures Implementing specific actions and systems designed to mitigate risks and manage emergencies effectively. Monitoring and Review Establishing ongoing processes to assess the effectiveness of preventive measures and adjusting strategies as needed. Crisis Communication External Communication Approaches Internal Communication Strategies External communication is aimed at managing relationships with the public, media, and other external stakeholders. It involves crafting clear public statements and media relations strategies to present the organization’s perspective and maintain trust during and after a crisis. Internal communication focuses on conveying essential information and updates directly to employees and stakeholders within the organization during a crisis. This ensures that everyone is aware of the situation, understands their roles, and can act accordingly to mitigate the impact of the crisis.

Business Continuity Plan

Transcript: The implementation phase involves policy changes, material acquisitions, staffing and mock testing Technical aspects of BCP Biannual or annual maintenance cycle maintenance of a BCP manual is broken down into three periodic activities. Confirmation of information in the manual, roll out to staff for awareness and specific training for critical individuals. Testing and verification of technical solutions established for recovery operations. Testing and verification of organization recovery procedures. multiple firewalls within and outside the cloud and servers Conduct Validation Exercises Desktop walk-thru or more Realistic simulation || “fire drill” Pre-exercise brief, audit the process, document progress, allow participant feedback, and debrief Business Contingency at Croods, Inc, - Why? Business Contingency Plan Business processes have to continuously evolve around the Crood's risk management framework The planning phase brings together multiple people within Croods who help design the plan Application security and service patch distribution Hardware operability Application operability Data verification Data application If continuous monitoring and regular maintenance of patches are not updated, the contingency plan may fail due to a lack of resources, proper reporting, technology, and inability to follow through with plan procedures At Croods, Inc a BCP is essential to it's success therefore... Objective The purpose of testing is to achieve organizational acceptance that the solution satisfies the recovery requirements. Plans may fail to meet expectations due to insufficient or inaccurate recovery requirements, solution design flaws or solution implementation errors. The last step is to test the plan and maintain it with continuous monitoring Testing and organizational acceptance Risks: Contingency Planning requires companies to think about: Training Plan Design Implement Test A management process that provides the strategic and operational framework to review and, where appropriate, to (re-)design the way an organization provides its products and services while increasing its resilience to disruption, interruption, or loss. Definition: -To practice & enhance readiness to ensure Business continues regardless -To update & improve business continuity plans, recovery plans, and system recovery procedures Definition continued Then they design the plan framework in accordance with company policies and budgetary requirements Conclusion continuous monitoring Periodic presentations to team members, management, new employees Any event that could impact operations is included, such as supply chain interruption, loss of or damage to critical infrastructure (major machinery or computing/network resource). As such, risk management must be incorporated as part of BCP Maintenance what is a disaster? how much loss can be tolerate? what are my options? what will a recovery plan cost? how quick do i need to reestablish business functions? Testing may include: Crisis command team call-out testing Technical swing test from primary to secondary work locations Technical swing test from secondary to primary work locations Application test Business process test Enable your organization to survive a disaster and to resume normal business in the shortest time So... lets lay out the process at Croods Croods, Inc

BUSINESS CONTINUITY PLAN

Transcript: Assessment Actions BCP Committee CASE 1: If BROADBAND stick is available 1. Using Broadband stick, connect to the internet. Upon gaining connection, connect to head office via VPN. Proceed with the usual transaction flow. CASE 2: IF BROADBAND stick IS NOT available 1. Since FINACLE SYSTEM is web-based, buddy branch will take in place. 2. Designated personnel/s will go to its buddy branch. She/he will be the one posting all the transactions being made in the offline branch. NOTE: Doing transactions in buddy branch will not affect the balance of that branch. The system is designed to detect the assigned branch per user ID. Since the designated personnel will be using her/his user ID, all transactions made will still fall on the branch where that user ID is assigned. -:- If the estimated outage is less than 24 hours, recovery will be initiated under normal bank operational recovery procedures found in the BCP. -:- If the outage is estimated to be longer than 24 hours, then the duty person in the Data Center immediately alerts the BCP Head Coordinator to activate the BCP, which in turn notifies and gets approval from the Senior Officials (CEO or President of the Bank) for the BCP to be activated. The recovery process then moves into the back-up phase. -:-The BCPCom remains active until recovery is complete to ensure that the bank will be ready in the event the situation changes. Back to Operations Scenario#4: Head Office and Backup Site SERVERS are not accessible (worst case for IT system) Guidelines: CEO and President. Senior Management Officials of the Bank responsible for the overall direction, decision-making, and approvals required to implement the BCP. Test Objectives: • Determine the state of readiness of CSBI’s BCP by creating a learning environment so that all participants can learn about the plan. • Execute/Simulate the plan learned during the classroom exercise to verify the applicability of guidelines formulated for specified scenario/s. • Validate the BCP resource lists (people and inventories) are sufficient to effect recovery of business operations and/or IT services as appropriate. Document changes and updates (including omissions) to the BCP. • Verify the BCP is current and accurately reflects the Bank’s requirements. Business Impact Analysis (BIA) and Risk Assessment Summary Damage Assessment Represented by the IT Auditor or IAD Head. Shall document all the findings and provides support during the emergency. He shall also make recommendations on changes to the normal control procedures necessitated by the recovery process. The emergency phase begins with the initial response to a disaster. During this phase, the existing emergency plans and procedures of the bank with direct efforts to protect life and property, the primary goal of initial response. Security over the area is established as local support services such as the Police and Fire Departments are enlisted through existing mechanisms. The BCP Head Coordinator is alerted and will begin to monitor the situation. Network Recovery of Local and Wide Area Networks Represented by the IT Head. Shall coordinate support for system recovery and data processing resources at the main data center and designated recovery sites. She/he will also help GSD during damage assessment. -:- The time required for recovery of the functional area and the eventual restoration of normal processing depends on the damage caused by the disaster. -:- The time frame for recovery of IT Systems can vary from several days to several months. In either case, the recovery process begins immediately after the disaster and takes place in parallel with backup operations at the designated Alternate Site. -:-The primary goal is to restore normal operations as soon as possible. -:-The following procedures are for recovering the Information Technology Systems at the Alternate Site (Hot Site). Procedures are outlined below. Each procedure should be executed in the sequence it is presented in order to maintain efficient operations. BCP Head Coordinator shall request permission to enter site from Fire Department (if required) or appropriate agency handling the emergency situation. He shall take a General Services representative from each of the appropriate vendors, the insurance claims representative and Information Technology personnel into the site. Scope BCPCom will operate the continuity system in coordination with the system at the Original or New site. These procedures shall include testing the Original or new system until it is functioning properly and the continuity system is shut down gracefully. 1. BCPCom will do the following: a. Convene at the Head Office Conference Room. b. Coordinate security & operational conditions with the CSBI Executive Management Team(CEO and President), Damage Assessment Team(GSD, ITD, and LSCAD) and Security Office Note: See Annex D-2 for Damage Assessment Template c. If assessment met any of the criterions for BCP Activation, BCP Head

Now you can make any subject more engaging and memorable