bcm presentation - investment or expense?
DESCRIPTION
BCM Presentation - Investment or Expense? (in English) A recent presentation I made evaluating if BCM is investment or expense.TRANSCRIPT
![Page 1: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/1.jpg)
1
Business ContinuityInvestment or expense?
Sidney R. Modenesi, MCBCC, MBCI
IV Seminário de GCN Gestão da Continuidade de Negócios
Brasília – 25/06/13
This is a quick and straight translation of the original presentation, i.e., some translation errors may occur.
![Page 2: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/2.jpg)
2
Agenda
Opening What is Business Continuity Some local significant regulations Standards and Good Practice Real experiences Investment or expense Adjourn
![Page 3: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/3.jpg)
3
Presenter
Sidney R. Modenesi, MCBCC, MBCI,
BS 25999 Technical Expert;
BCI Area Representative for Brazil;
STROHL Brasil General manager since 2002;
Bachelor in Computer Sciences, IME/USP;
Master Degree in Entrepreneurship, FIA/FEA/USP;
Approved in the DRII certification exam in 2000;
Approved as MBCI by BCI in 2005;
BS 25999 Technical Expert by BSI in2011;
Contacts: [email protected]
+55 11 5583-0033
![Page 4: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/4.jpg)
4
Business Continuity Institute
Global leader institute in Business Continuity; Mission: to promote the art and science of Business
Continuity worldwide; With 10.000+ certified professionals in 100+
countries; Supported the development and enhancement of
many Business Continuity standards as: PAS 56, BS 25999, ISO 22301/22313, GPG 2013 ...
![Page 5: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/5.jpg)
5
Assumptions
“If anything can go wrong, it will.”
Murphy´s Law
“And more, it will go wrong in the
worst manner, at the worst moment
and in a way it will cause the worst
possible damage.”
Corollary
“Murphy was an optimist”.
Clark´s Law
Noeh Arch
1st documented record of Business
Continuity in the Human Kind history,
although using an inside information …
![Page 6: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/6.jpg)
6
What is Business Continuity?(according to ISO 22301/22313)
It is a holistic management process that identifies potential threats to an organization and the impacts to business operations those threats, if realized, might cause, and which provides a framework for building organizational resilience with the capability of an effective response that safeguards the interests of its key stakeholders, reputation, brand and value-creating activities.
![Page 7: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/7.jpg)
7
What is Business Continuity?(according to ISO 22301/22313)
![Page 8: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/8.jpg)
8
What is Business Continuity?(according to ISO 22301/22313)
Or simply: to restart in a planned way services, products and/or critical business processes in a alternate location, in a priory defined time frame and service level, before the consequences and impacts become unacceptable.
![Page 9: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/9.jpg)
9
Local significant regulations
3380 Regulation – BACEN (like FED)
Defines the implementation of the Operational Risk management strucuture in accordance with the Basel II agreement. Be in force since July 29th, 2006.
VI – existence of contingency plans containing strategies to be adopted to assure continuity conditions of core activities and to limit severe losses due to operational risks.
![Page 10: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/10.jpg)
10
Significant regulations
Business Resiliency and Continuity
Principle 10: Banks should have business resiliency and continuity plans in place to ensure an ability to operate on an ongoing basis and limit losses in the event of severe business disruption.The Committee’s paper, High-level principles for business continuity, August 2006, discusses sound continuity principles in greater detail.
![Page 11: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/11.jpg)
11
Local significant regulations
SAC Law(Customer Service Centers)
SUSEP – Circular # 285(insurance market)4. Operational Continuity Plans:
4.1. to indicate a summary plan of the operational continuity in contingency or emergency situations; 4.2. to present the results of the last test of the operational continuity test.
![Page 12: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/12.jpg)
12
Standards and Good Practice in BCM
ISO 22301:2012 Good Practice Guidelines 2013
![Page 13: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/13.jpg)
13
Real experiences
World Trade Center – 09/11/2001 London Underground - 2005
![Page 14: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/14.jpg)
14
Real experiences
Riots – 2006 ...Riots – 2006 ...
RJ, SP ...
![Page 15: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/15.jpg)
15
Real experiencesVulcano in Iceland Vulcano in Chile
![Page 16: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/16.jpg)
16
Real experiences
Fukushima, Japão - 2011
Due to the Fukushima earthquake and tsunami some Brazilian car factories had to close one of the production shifts due to lack of core components. BALANCE: Lost sales
![Page 17: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/17.jpg)
17
Real experiences
Oklahoma tornado - 2013 Petrópolis/RJ - 2011
![Page 18: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/18.jpg)
18
Real experiences
All variations of flue Dengue, an endemic local problem
![Page 19: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/19.jpg)
19
Real experiences
Fire in one of the Social Security buildings in Brasilia (INSS) - 2005 Data Center fire - 2009
![Page 20: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/20.jpg)
20
Real experiences – Social Midia
Foreign Affairs invasion – 06/13Brasilia Congress invasion – 06/13
![Page 21: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/21.jpg)
21
Real experiences – Crisis management
![Page 22: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/22.jpg)
22
Real experiences
The potential risks list is endless:
Naturals: Heavy rains,
earthquakes, vulcanos, tornados ...
Humans, accidentals or deliberates: fire, explosion,
contamination ...
Technological: Hacker, invasion, virus,
systemic failure...
![Page 23: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/23.jpg)
23
Risk Appetite
For each non eliminated risk
An strategy developed, documented, tested and updated will be needed
To restart in a planned way services, products and/or critical business processes in a alternate location, in a priory defined time frame and service level, before the consequences and impacts become unacceptable.
![Page 24: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/24.jpg)
24
Implementation cycle
•To
identify and mitigate risks.
•FOR EACH NON ELIMNATED RISK
•Recovery Strategies
•Developed, documented, tested and updated
•To planned restart services, products and/or business processes in an alternate location
•PDCA - Plan, Do, Check and Act
![Page 25: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/25.jpg)
25
Investments and expenses
The development and implementation of the Recovery Strategies will require de:• Initial (upfront) investments to adapt office space,
electrical power, network, PABX and phone lines, desks, chairs, workstations ...
• Recurring expenses to maintain all this infra structure and
• Eventual expenses with exercises, testes and validation tests (DRP).
![Page 26: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/26.jpg)
26
Equilibrium point
RISK APPETITE
Time
Financialand operational
losses
Investments in prevention and
contingency
$
t0t1< t0
< Risk Appetite
t2 > t0
> Risk Appetite
$
![Page 27: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/27.jpg)
27
Investment or expense?
• Financially BCM has:– Implementation investments CAPEX– Recurring expenses OPEX
• In the Management or Risk Appetite point of view BCM helps to increase the operational resilience– Increasing availability, productivity and time
redution of the interruptions Investment– It is part of the business cost.
![Page 28: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/28.jpg)
28
Return of investment
Plan
Do
Check
Act
Plan the recovery strategy
Implement the recovery strategy
Exercise, test and stress the recovery strategy
Treat the Non Conformities:•Update the Recovery Strategies and/or•Update the BAUdaily processes.Benefits: improve in the quality, productivity and availability of the critical products, services and business processes.
![Page 29: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/29.jpg)
29
Adjourn
A well developed, implemented and maintained Business Continuity Program will: Increase the Risk Awareness; Reduce the organization risks; Reduce the interruption durations; Bring ROI; Increase the organization value, specially with
a BCMS certification.
![Page 30: BCM Presentation - Investment or Expense?](https://reader035.vdocuments.us/reader035/viewer/2022062511/54bcd2c44a7959c0038b4577/html5/thumbnails/30.jpg)
30
Closing
Plan for the WORST
Work for the BETTER.