business continuity management - core services
Post on 16-Jul-2015
141 Views
Preview:
TRANSCRIPT
CORE Integrated Management Systems
Copyright Continuity and Resilience (CORE) 2014 V 1.01
Are you Prepared and Ready to Respond?
Capability Briefing
Who We Are?• We are a firm that specializes in Business Continuity and IT Disaster
Recovery domains, offering Consulting, Assessments and Trainings
Services and software solutions for organizations in both the public and
private sectors. We too are certified ISO 22301:2012 firm.
• Our work is based on global standard / framework, but suitably engineered
to meet the unique business needs of each client, by adopting the relevant
best practices, making it more practical.
• Our consultants are highly experienced, coming from different industry /
business background, enabling us to deliver high quality results and value
to our customers.
• We partner with industry-leading BCM tools like eBRP, Sunguard, Inoni,
etc., that will allow the customer to manage and maintain the BCM,
effectively with reasonable assurance.
• BCI Licensed Training Partner for India and Middle-East Regions.
2
Differentiators
3
About CORE• Continuity and Resilience (CORE) operates across a range of professional specializations in
Consultancy & Training covering:
• Crisis Management
• Crisis Communications
• Business Continuity
• Disaster Recovery
• We also assist organizations to implement and conform to corporate standards in these domains,
such as the ISO 22301, ISO27001, ISO9001, ISO14001 etc. We have partnered with British
Continuity Institute (BCI) – UK for offering BCM Certification and with British Computer Society
(BCS) – UK for offering the Green IT Certification.
• Our consultants and trainers have conducted a number of assignments for organizations based in
India, the USA, Canada, UK, Europe, Africa and the Middle East. We have vast experience and
expertise in consulting and training for a wide range of industry sectors like Financial Services,
Telecom, Manufacturing, Airlines, Trading Oil and Gas, Government Departments, FMCG,
Nuclear, etc.
• We strongly believe that there is no other company in the region that can demonstrate strong track
record of all these activities, at the highest level of expertise. Importantly, CORE is also ISO22301
certified – making CORE possibly the only BCM Service provider in the region which has
demonstrated its competence by getting certified in ISO22301, not to mention its track record of
helping its customers attain ISO 22301/ BS 25999 certification.
• Given our collective experience of over 100+ man-years, we have attained intimate knowledge
and specialization across various industries, geographies and cultures.
• Sustainability
• Information Security
• IT Service Management
• Project Management
• Quality
4
About CORE…… (contd.)
5
CORE
Our Leaders & CORE Team
Dhiraj LalNaseeruddin
MehdiDaman Dev
Sood
S Seshadri Andrew Hiles Kush Srivastav
Y Parthasarathy
Hatim BilalVinod Kumar
Nair
6
7
Dhiraj LalFBCS, MBCI, BS25999 / ISO 22301
Lead Auditor and Technical Expert,
CBCP, BCCE, CISA, ITIL
Dhiraj Lal is Executive Director and Principal Consultant of Continuity and Resilience(CORE). He is Asia’s first
BSI appointed Technical Expert for BS25999 / ISO 22301, and is also a BS25999 / ISO 22301 assessor. He
teaches the advanced level certification workshops in BCM and BS25999 / ISO 22301, and also consults in
implementation of BCM and BS25999 / ISO 22301. He has also been invited by the British Standards Institute to
participate in the audits of 2 of the first 10 organizations in the world to be awarded the BS25999 certification. He
was recently invited to present the 2nd Middle East Crisis and Disaster Management Conference in Abu Dhabi,
where he also ran a tabletop exercise on Crisis Management (Fire and Bomb scenario).
• Mr. Lal has worked previously for Agilent Technologies Limited, an organization promoted by HP. He was
also earlier the Senior Vice President and Practice Head for IT Service Excellence and Business
Continuity/Disaster Recovery with a reputed Consulting organization.
• Mr. Lal worked as the Director for Business Continuity Planning and Global Process Integrity at the
American Express Financial Centre; one of the first organizations to offer Back Office Processing services
for its US Operations. It was while Mr. Lal headed the function that American Express was awarded the ISO
9001 certification for its Business Continuity program.
• Mr. Lal spent 10 years with Citibank NA (where he was last Regional Head of Audit and Risk Review), and
5 years with Standard Chartered Bank in the Middle East.
Qualifications and Professional Affiliations
• Post Graduate in Management and holds a Bachelors degree in Chemical Engineering. Other than his
certifications as a Certified Business Continuity Professional (CBCP), Business Continuity Certified Expert
(BCCE) and Certified Information Systems Auditor (CISA).
• He is also holds certifications in ITIL and Six Sigma. He has also instructed for the Disaster Recovery
Institute in Asia and has regularly presented on Business Continuity and Disaster Recovery, at
Conferences, both in India and overseas.
• He is a contributing author to the “The Definitive Handbook of Business Continuity Planning”, which is one
of the most respected encyclopaedia on BCM.
8
Mehdi NaseeruddinCEOMaster of Science, CS Pace University, NY, USACBCI, CRISC
BCM, ERM, IA, PM, ITA
Mehdi Naseeruddin is a seasoned professional with over 14 years of Risk Management experience. He was theleader for Deloitte Bahrain's Enterprise Risk services (Cyber Security, Identity & Access Management, Privacy &Data Protection, Security Management & Transformation and Security Operations) and regional leader forBusiness Continuity Management & Resiliency services, and provided solutions for clients specializing in theFinancial Services Industry, Oil & Gas, Healthcare, Telecommunications and Media and Manufacturing industriesacross different geographic locations (United States, Australia and the Middle-East).
Mehdi also led the Project Risk Services practice for Deloitte Middle East, wherein he was in-charge of conductingproject risk assessments for varied industry clients, including Capital Projects, major IT implementations etc.
• Executed end-to-end Enterprise Risk Management (ISO 31000) and Business Continuity Managementframework (ISO 22301) implementations across different industries such as Telecommunications, FinancialServices, Manufacturing, Healthcare and PharmaceuticalOil & Gas, Media, Aviation, Nuclear, Central Banking, Retail Banking, Investment Banking, Public Sector,Mining and Minerals.
• He had been closely associated with some of the renowned names in the ME region, Emirates NuclearEnergy Corporation-UAE, Telstra-Australia.
• Optus-Australia, Zain-Bahrain, Central Bank of Kuwait-KuwaitMa'aden-KSA, Sabic-KSA, Liberty Mutual-USA, Jones Apparel Group-USA, NCBC-KSA, Bank of Bendigo-Australia, National Australia Bank-Australia, ANZ-Australia, Mubadala-UAEAramex-UAE, Ma'aden Phosphate Company-KSA.
• His specialties are Enterprise Risk Management (ISO 31000), Business Continuity Management (ISO22301 & BS25999), Disaster Recovery Planning, IT Audit Control Assurance, IT / IA Risk Assessment,Project Risk Management, Internal Audit (FSI, Aviation Industry), Integrated Management Systems (PAS99,ISO 2000, 27001,14001, BS 25999), Data Security and Privacy, Regulatory Compliance (PCI DSS, ITSOX, FFIEC, HIPAA ADSIC)
9
Daman Dev SoodFBCS, MBCI, SMIEEE, MAIMA, ISO 22301 LA & ExpertIEEE Ambassador Author: Green IT Maturity ModelCIO & Head - Sustainability Practice
As BCI’s Merit Award (Global) Winner 2012, Business Continuity Manager of the Year in BCI’s C&R Awards India
2009, Finalist in Parivartan Sustainability Leadership Awards 2014, and with over 29 years’ experience in the
Industry, Daman is currently the CIO and Head – Sustainability Practice at Continuity and Resilience. He has
earlier worked with Steria as Head Business Continuity Management (UK, India) & Head Green Activities (India).
Initially he worked with TCS for over 20 years in various roles and positions. He has rich experience in
Environmental Sustainability, Business Continuity Management, Business Excellence and Consulting (BCM,
Green IT, Quality/ Process/ Malcolm Baldrige). He is a Technical Expert & Lead Auditor for BS 25999 (Business
Continuity Management System). He is also an Energy Management Expert (ISO 50001). Daman is Accredited
Tutor for BCS “Foundation Certificate in Green IT” course. Daman is an ISO 22301 Lead Auditor and Expert.
• Daman is IEEE Ambassador, Fellow of the BCS (British Computer Society), Member of the BCI (Business
Continuity Institute), Senior Member of IEEE (Institute of Electrical and Electronics Engineers) and Chair
Computer Society Chapter of IEEE Delhi Section.
• He is member of AIMA (All India Management Association) and Member of DMA (Delhi Management
Association). He is Life Member of the CSI (Computer Society of India).
• Daman has traveled to or worked in Scotland, England, Netherlands, France, Zambia, USA, Indonesia,
Spain, Egypt, UAE, Oman , Iran, Mauritius, Sri Lanka, Qatar, Saudi Arabia and Singapore. He possesses
excellent mix of experience of a practitioner, trainer and consultant.
• He has delivered over 400 talks/ workshops in national and international events. Daman is also a
motivational speaker and has conducted over 30 sessions of Possibility Thinking workshop in TCS, Xansa,
Cambridge School, Institute of Vocational Training, Udayan Care NGO, and Arya Kanya Sadan – where
over 1000 people have benefited and have provided excellent feedback. He has been on panel at various
TV shows/ conferences/ seminars around Green/ BCM.
• Daman is currently member of the ASSOCHAM National Council on Climate Change and ASSCHAM
National Council on Environment & Safety. He has experience of working with CII (Confederation of Indian
Industry) for over three years as the Convener of the CSR Taskpanel working on Communities and
Disasters.
• Daman has the experience of convening/ coordinating/ advising national/ international conferences/
workshops.
S. SeshadriFBCS, MBCI, CBCP, M.Sc., CAIIB
LA – ISO 22301/ISO 27001/ISO 20000/ISO 9001
Head, IT DR & Service Management
Mr. S. Seshadri has work experience that spans about 39 years, in the domains of BCM, IT and Banking &
Financial Services. He was one of the pioneers in the IT Division of Canara Bank from 1984 till 1994 (post his
career in banking for about 10 years from 1975), heading their Main Frame Operations and Data Center. He
worked for 3 years with Bank Muscat as IT Head of the Bank’s Indian Operations. He has the unique advantage of
having extensive exposure to financial industry and IT/ITSCM/BCM domains, and also the technical details.
Mr. Seshadri has been engaged in full-time consulting and training for over 12 years now, and has delivered in
India and overseas a number of assignments and large implementations for organizations of size 50,000
employees and above. He has an in depth knowledge of:
• Business Continuity and IT Disaster Recovery, assisted organizations to implement BCM/IT DR, and has
also conducted Gap Assessments relating to BS25999/ISO 22301 framework.
• Project managed/delivered atleast 8 full lifecycle BCM projects in BS 25999/ISO 22301, in India and the
middle-east. He has helped our clients achieve ISO 22301 Certification.
• BCI, UK approved Instructor for their GPG 2013 5 day workshop leading to CBCI/MBCI certification for
individuals.
• Developed our 3-day IT Disaster Recovery workshop and has successfully delivered over 20 workshops in
India and the Middle East. He has delivered IT DR consulting to our clients, helping them build a resilient IT
for these customers.
• Participated in several BCM conferences and spoken on various emerging aspects of BCM and IT Disaster
Recovery. He has worked on enterprise projects relating to IT Service Management (ISO 20000) and
Information Security (ISO 27001). Apart from participating in the delivery of complex projects, he has
assisted quite a few companies in terms of re-positioning their products and services, as part of his
Management Consulting.
Qualifications and Professional Affiliations
• Post graduate in Mathematics from St. Joseph’s College, Trichy (erstwhile Madras University).
• Certified Associate of Indian Institute of Bankers.
• Formally trained in ITIL Foundation.
• BCM/ IT certifications
11
Kush Srivastava
BCCS, AMBCI, ISO 22301 Lead Auditor
Kush has been in the BCM Domain for over 10 years, starting off with Operations, and then finally adopting BCMas a full-time consulting career. He has been involved in Business Continuity and Disaster Recoveryimplementation, Assessment of resiliency of the organizations business continuity framework, establishment ofend-to-end Business Continuity framework at Organization level across industry & verticals, training of CrisisManagement teams, risk advisory services, optimizing BC Operations model, training & awareness workshops inconcepts of effective business continuity planning for Insurance companies, its implementation & risk assessment/ mitigation. He has specialized in customizing of Business Continuity solutions for optimal utilization oftechnology, human & other critical resources. He has extensive experience of identifying critical part ofOperations, verifying & validating Documentation, process flowcharts (Swim-lane format) and critical systems forBCP (mapping IT/Technology listing with Functional/Operational listing). The clientele comprises of leadingCommercial Banks, Micro Credit institution, Insurance Companies, auto manufacturers, etc
Kush has extensive expertise in continuous process improvement, Operations Reengineering, developing &motivating teams, manage multi-tasking, Business Process Mapping, and managing challenges on account ofChange Management.
• For one of his employers he was recognized from among 33,000+ global employees for focusedaccomplishments for client & employee retention – with an Award that recognizes Top 100 talent ofEnterprise headcount.
• He has the distinction of being selected in “Top 6 Business Continuity Managers in India” across Industriesat the 1st Business Continuity & Resilience Awards 2009, instituted by Business Continuity Institute, UK.
• He has been awarded “Exceptional Performance Award” for 1993, 1994 & 1995 as a banking professional.
Qualifications and Professional Affiliations
• The Associate Business Continuity Professional (ABCP) certification from DRI International US,
• The Business Continuity Certified Professional (BCCP) from BCMI Singapore, and is also an Affiliate Member of the BCI as well as an ISO 22301 Lead Auditor.
• Certifications in International Finance and Corporate & Management Laws.
• Commerce Graduate and did his Post Graduation with specialization in Finance.
• Formally trained in ITIL Foundation, He has a high exposure to and good understanding of the Middle East,
Trainings & Exercises
Audits & Maturity
AssessmentsConsulting
CORE’s Services Areas
Business Continuity
• Reducing the likelihood of occurrence and minimize the downtime by implementing the right recovery & continuity strategies to respond and recover the key activities of business following a catastrophic event, affecting the business and its assets as well as its’ suppliers.
IT Disaster Recovery
• Reducing the likelihood of downtime and implementing strategies to recover business critical activities, following the onset of a disaster, that affects the technical / technological infrastructure of an organization and its’ suppliers.
Crisis Management
• Reduce uncertainty in the event of a crisis, by identifying the potential threats to an organization and its stakeholders, by defining methods to deal with those and enable making decisions within a short timeframe.
We advice, facilitate, assess and train on:
13
Consulting - Advisory & Implementation
14
CORE’s Resiliency Services Areas
Our Consulting Services
RECOVERYCONTINUITYRESILIENCE
Governance
Business
Alignment
Strategies
& Plans
Implementation
People &
Process
Operating
Model
Regulations &
Standards
Policies &
Procedures
Auditing &
Compliance
Continuous
Improvement
Current State
Assessment
Industry
Benchmarking
Risk
Assessment
Business
Impact
AnalysisCrisis
Management
Emergency /
Incident
Response
Business
Continuity
ASSET
Recovery
(Buildings,
Equipment,
Technology,
Human Resources,
3rd Parties)
Business Continuity &
Emergency Management
Tools
Enterprise
Application
Recovery
Technology
Infrastructure
Resilience
Data Backup &
Recovery
Work Area
Recovery
Training &
Awareness
Testing &
Exercising
Change
Management
Co-Sourcing
Metrics &
Reporting
15
Governance
Activity Description Benefit
Operating Model
Create a governance structure and framework in a
systematic manner in tune with organization’s hierarchical
structure to align with, for effective management and
maintenance of the BCM Program, using the Project
Management Best Practices.
Helps an organization to build and sustain
on their current BCM capabilities as well
align the BCM goals with their business
goals with a long-term.
Regulations &
Standards
Prepare a list of all applicable laws and regulations,
compliance requirements from those laws, review the
contractual obligations and compliance mandates, to know
more on the mandatory needs of business, in terms of
compliance.
Help the businesses to clearly know the
expected compliance requirements and
obligations as well as to adhere to
contractual mandatory norms.
Policies &
Procedures
Policies provide a high-level directives for an organization
and its employees on the expectations against set norms.
Procedures help develop a systematic approach to
handle and respond to the situations in a structured
manner
Assure required level of Leadership buy-in
and support to set the context and tone
from the top, for alignment and adherence.
Auditing &
Compliance
Evaluate the effectiveness of the management system,
with a reasonable assurance to ensure that, the
requirements are in conformance of the base standard,
regulations, policies and procedures and a directives of
their stakeholders.
Support in indentifying the gaps and
measures to validate the effectiveness
and efficiency of the management system
Continuous
Improvement
Provides an assurance on the sustenance of the
management system, by addressing the identified gaps
and opportunities for improvement and non-conformances
by following a systematic methodology like PDCA.
Ensure driving the management system
towards the maturity for better alignment
of the business objectives and long-term
sustainability.
RECOVERYCONTINUITY
RESILIENCE
Governance
Business
Alignment
Strategies
& Plans
Implementation
People &
Process
Operating
Model
Regulations &
Standards
Policies &
Procedures
Auditing &
Compliance
Continuous
Improvement
Current State
Assessment
Industry
Benchmarking
Risk
Assessment
Business
Impact
Analysis
Crisis
ManagementEmergency /
Incident
Response
Business
Continuity
ASSET
Recovery
(Buildings,
Equipment,
Technology,
Human Resources,
3rd Parties)
Business Continuity &
Emergency Management
Tools
Enterprise
Application
Recovery
Technology
Infrastructure
Resilience
Data Backup &
Recovery
Work Area
Recovery
Training &
Awareness
Testing &
Exercising
Change
Management
Co-Sourcing
Metrics &
Reporting
16
Business Alignment
Activity Description Benefit
Current State
Assessment
Conduct “As Is Where Is” evaluation on the existing
system / process in place, to validate its conformity against
the best practice or standard selected for baseline.
Alignment with a industry specific or global
best practice standard providing
reasonable assurance on the
effectiveness of the system
Industry
Benchmarking
Perform a GAP and Maturity assessment to validate the
conformance of the said management system against pre-
defined benchmarking levels, specific to the industry the
organization is in.
Helps an organization to align with the
industry specific benchmarking (best
practices) to comply with it, for better and
overall alignment from the operations
point of view.
Business Impact
Analysis (BIA)
Examines the likely impacts of tangible and intangible
effects on business, by conducting a thorough and
detailed analysis on each and every function / department
of the business, its’ processes and activities within to
evaluate the impact of it, individually if not being
operational at different time levels and assess its impact
on the organization, to prioritize it from the recovery.
Assists an organization to focus on the
high-impacting activities / processes and
prioritize the recovery preparations within
the pre-defined timelines by proper
allocation of resources, minimizing the
impact on business.
Risk Assessment
(RA)
Identify the potential threats and its possible exploitation
opportunities on the weaknesses existing within the
prioritized activities (outcome of BIA) and deploy additional
controls / measures to reduce the likelihood of its
occurrence and/or minimize the impact, during the
disruptive situation.
Supports the organization to prepare in
advance the likely possibilities of threats
and practice the response and recovery
mechanisms for better sustenance,
anytime following a risk-based approach
to business.
RECOVERYCONTINUITY
RESILIENCE
Governance
Business
Alignment
Strategies
& Plans
Implementation
People &
Process
Operating
Model
Regulations &
Standards
Policies &
Procedures
Auditing &
Compliance
Continuous
Improvement
Current State
Assessment
Industry
Benchmarking
Risk
Assessment
Business
Impact
Analysis
Crisis
Management
Emergency /
Incident
Response
Business
Continuity
ASSET
Recovery
(Buildings,
Equipment,
Technology,
Human Resources,
3rd Parties)
Business Continuity &
Emergency Management
Tools
Enterprise
Application
Recovery
Technology
Infrastructure
Resilience
Data Backup &
Recovery
Work Area
Recovery
Training &
Awareness
Testing &
Exercising
Change
Management
Co-Sourcing
Metrics &
Reporting
17
Strategies and Plans
Activity Description Benefit
Crisis Management
Crisis Management and Emergency Response Plans are
the overarching crisis/incident management plans and are
designed to achieve effective co-ordination of the
organization’s resources to large scale and unusual
events to protect life, property and reputation (e.g.,
through effective internal and external communications,
and co-ordination with the local and international
regulators) during and immediately following any crisis
affecting the organization.
Assists the organization in defining roles
and responsibilities of the individuals who
will be instrumental in responding and
make decisions at the time of a crisis.
Furthermore, Crisis Communication plans
helps identify internal and external
stakeholders and document the
communication protocols between all
related parties.
Business Continuity
Business Continuity Procedures define the actions and
resources necessary to achieve the objectives of the
organization’s recovery strategy. The procedures will
provide guidance through clearly documented, defined,
action-oriented tasks. These will address what needs to
be carried out during a crisis in order to minimize decision
points at the time.
BC Procedures contain actionable tasks
with clear beginnings and end points to
report to operation center executives for
managing recovery-effort progress,
including identifying tasks to be
undertaken, teams to complete them,
team assignments and identifying the key
contacts, suppliers and resources
necessary to support the recovery.
Asset Recovery
Recovery strategies are developed based on our Asset
recovery strategy development model. We collaborate with
the organization to customize the asset recovery model,
containing an appropriate set of circumstances for which
business continuity management strategies should be
developed for your organization.
This model eliminates creating an
unmanageable single plan and helps
avoid an enormous number of event
specific plans, by focusing your strategies
and plans on the five key asset classes an
organization must protect and recover for
continued sustainability of any given
process. These are Workplace,
Equipment, Technology, People and Third
Party service providers.
RECOVERYCONTINUITY
RESILIENCE
Governance
Business
Alignment
Strategies
& Plans
Implementation
People &
Process
Operating
Model
Regulations &
Standards
Policies &
Procedures
Auditing &
Compliance
Continuous
Improvement
Current State
Assessment
Industry
Benchmarking
Risk
Assessment
Business
Impact
Analysis
Crisis
Management
Emergency /
Incident
Response
Business
Continuity
ASSET
Recovery
(Buildings,
Equipment,
Technology,
Human Resources,
3rd Parties)
Business Continuity &
Emergency Management
Tools
Enterprise
Application
Recovery
Technology
Infrastructure
Resilience
Data Backup &
Recovery
Work Area
Recovery
Training &
Awareness
Testing &
Exercising
Change
Management
Co-Sourcing
Metrics &
Reporting
18
People & Process
Activity Description Benefit
Training &
Awareness
To provide an awareness and training strategy within the
BCM framework - to help the BCM program
implementation team members facilitate awareness and
training by defining their roles and responsibilities within
the implementation process
Successful BCM program implementation
occurs when everyone involved in the
process is aware and equipped to fulfill his
or her BCM responsibilities. These
stakeholders succeed through a well-
planned set of activities targeted
appropriately to them.
Testing & Exercising
To provide guidance in delivering and supporting test
program initiatives - to introduce business process work-
area recovery testing, emergency communications testing
and desktop walk-through testing
Successful BCM program implementation
occurs when everyone involved in the
process is aware and equipped to fulfill his
or her BCM responsibilities. These
stakeholders succeed through a well-
planned set of activities targeted
appropriately to them.
Co-sourcing
At times, running a full fledged BCM program becomes
cumbersome and time consuming for organizations who
are strapped for resources, however are prudent to
understand the value BCM provides towards sustaining
their business in the aftermath of a crisis. In these
circumstances, organizations can benefit from co-sourcing
the BCM function to CORE. CORE can help in the
development and implementation of a robust End-to-End
BCM framework.
Dedicated team of experienced BCM
resources embedded within the
organization to ensure end-to-end BCM
implementation. There will be ongoing
knowledge transfer and CORE can assist
in building an internal team to assume full
responsibilities of the BCM program on an
ongoing basis.
Change Management
The objective is to help ensure the continued viability of
the recovery and restoration plans that are developed as
part of this project, plan administration guidelines will be
developed and documented.
These guidelines will address the on-
going maintenance and testing required
supporting the Business Continuity
Program
RECOVERYCONTINUITY
RESILIENCE
Governance
Business
Alignment
Strategies
& Plans
Implementation
People &
Process
Operating
Model
Regulations &
Standards
Policies &
Procedures
Auditing &
Compliance
Continuous
Improvement
Current State
Assessment
Industry
Benchmarking
Risk
Assessment
Business
Impact
Analysis
Crisis
Management
Emergency /
Incident
Response
Business
Continuity
ASSET
Recovery
(Buildings,
Equipment,
Technology,
Human Resources,
3rd Parties)
Business Continuity &
Emergency Management
Tools
Enterprise
Application
Recovery
Technology
Infrastructure
Resilience
Data Backup &
Recovery
Work Area
Recovery
Training &
Awareness
Testing &
Exercising
Change
Management
Co-Sourcing
Metrics &
Reporting
19
Implementation Approach & Methodology
20
BCMS Requirements (Leading Practice)
Continual improvement of Business Continuity Management System (BCMS)
Interested
Parties
Requireme
nts for
Business
Continuity
Interested
Parties
Managed
Business
ContinuitySource: ISO 22301:2012
21
Audits and Maturity Assessments
22
First Party Audits
• Support the client by acting as an extended arm of their Internal Audit function and perform the audits from a Self-Assessment / Evaluation mode, to evaluate the overall effectiveness of the management system and provide a detailed report on the gaps pertaining to non-conformance and improvements.
Second Party
Audits
• Conduct audits on behalf of our clients, on their vendors / suppliers as an extension of their Internal Audit Team, to evaluate and validate the conformance of the vendor / suppliers business in tune with the expectations set by the client, as per the contractual obligations and compliance with the legal and regulatory norms.
Third Party Audits
• Partner with Certification Bodies as “Empanelled Auditors” as a resource and conduct the audits on their clients’ in line with the norms of the certification body’s internal processes and alignment with the global audit standards like ISO 19011, ISO 17021 etc.,
Audits as a Service, CORE conducts :
23
GA
P A
ss
es
sm
en
ts
• Perform the AS-IS Basis review and evaluate with the chosen standard and/or best practice and/or benchmark framework to identify the gaps and opportunities for improvement on the management system being assessed. M
atu
rity
As
se
ss
me
nts
• Conduct the assessment based on a specific benchmark / global standard / regulatory requirement / best practice and assess it’s maturity based on the pre-defined parameters set to validate its overall performance and maturity of the current management system.
Be
nc
hm
ark
ing
Su
rve
ys
• Conduct surveys specific to the requirements based on a pre-defined global parameters of relevance to the management system being assessed using various approaches, analyze the data points and evaluate the maturity of it in conformance with the benchmark.
Assessments as a Service, CORE conducts :
24
Trainings & Exercises
25
Trainings
Public Programs
• Global Certifications like BCI, IRCA, PECB, APMG etc.,
• CORE Certifications
In-house Workshops
• Global Certifications like BCI, IRCA, PECB, APMG etc.,
• CORE Certifications
Tailor-made
• Customized to clients
• Specialized coverage
• Awareness Education
• Simulated Exercises
26
List of TrainingsNo. of days Workshop Title No. of days Workshop Title
1 Certified Business Continuity Professional 3 Certified IT Disaster Recovery Specialist
1 Certified Environmental Sustainability Professional 1 Certified Risk Management Best Practices Workshop for PSUs
3 Certified ISO 22301 Lead Implementer Transition 1 Certified Risk Management Professional Workshop
1 Certified ISO 22301 Professional 1 Certified Social Media Crisis Management Professional
2 Transition Course from ISO/IEC 27001:2005 to ISO/IEC 27001:2013 3 COBIT®5 Foundation with Case Study
5 5 Day Lead Auditor Course on ISMS ISO 27001:2013 2 Enterprise Risk Management Workshop
2 BCI BCMS Audit Workshop* 1 Fundamentals of UAE BCM STANDARDS ( NCEMA 7000:2012 )
3 BCI Certification Workshop Based on the Good Practice Guidelines (GPG) HALF DAY* Crisis and Disaster Management Simulation Exercise for top Management
*5 BCI Certification Workshop Based on the Good Practice Guidelines (GPG) 5 ISO 22301 Lead Auditor Workshop
3 BCI’s BCM Audit Workshop 3 ISO 22301 Lead Auditor Workshop (Accelerated)
1 BCM Fundamentals for Arabic Speakers 5 ISO 22301 Lead Auditor Workshop (ANSI Accredited)
3 BCS Foundation Certificate in Business Analysis 5 ISO 22301 Lead Auditor Workshop (IRCA Accredited)
3 BCS Foundation Certification Workshop in Green IT 3 ISO 22301 Lead Implementer (Accelerated)*
5 weeks*Blended BCI Certification W/S Based on the Good Practice Guidelines
(GPG)) – 4 Weeks self learning and 2 days classroom session1 ISO 27001 Lead Auditor
1 Certified BIA professional 2 ISO 31000 Risk Management Workshop
3 Certified Crisis Management Specialist Workshop (PAS 200:2011) 2 ISO22301 Internal Auditor Workshop*
1 Certified Data Privacy Professional 1 ITIL® Foundation with Case Study
1 Certified Energy Management Professional 1 Migration to ISO 22301
3 Certified Energy Management Specialist 2 The BCI Business Continuity Management System (BCMS) Audit Course
1 Certified Green IT Professional 2 The BCI Business Impact Analysis (BIA) Training Course
3 Certified ISO 22301 Lead Auditor 2 The BCI Exercise Planning Course
3 Certified ISO 22301 Lead Auditor Transition * 2 The BCI Introduction to Business Continuity
5 Certified ISO 22301 Lead Implementer * 1 The BCI Supply Chain Continuity Management Course
1 Certified ISO 31000 Professional Workshop 1 The BCI Writing Business Continuity Plans Course
2 Certified ISO 31000 Risk Management Specialist 1 Workshop on Crisis Management and Disaster Simulation Exercise
1 Certified IT Disaster Recovery Professional 3 Implementation W/S on UAE BCM Standard AE/HSC/NCEMA 7000:2012
27
Our Clients
28
Some of Our Clients
29
Some of Our Clients……. (Contd)
30
31
CONTINUITY & RESILIENCECORE Integrated Management Systems Pvt. Ltd.,
Level 15, Eros Corporate Towers, Nehru Place, New Delhi 110 019 India
Ph: +91 11 6462 9381 / 6546 6332 / 36 | FAX: +91 11 4105 5535
Info@continuityandresilience.com | www.continuityandresilience.com
32
top related