bia survey raw data

7/30/2019 Bia Survey Raw Data

1/21

How large is your organisation: How distributed is your company?

Medium (100 - 499 staff) Single site

Large (500+ staff) Multinational - less than 50 locations

Large (500+ staff) Multinational - 50 or more locations

Large (500+ staff) Multinational - 50 or more locationsLarge (500+ staff) National - 10 or more locations

Medium (100 - 499 staff) National - 2 to 10 locations

Large (500+ staff) National - 2 to 10 locations



Large (500+ staff) National - 10 or more locations

Small (1 - 99 staff) National - 2 to 10 locations







Large (500+ staff) Single site














Medium (100 - 499 staff) Multinational - less than 50 locations



Small (1 - 99 staff) Single site










Large (500+ staff) Multinational - 50 or more locationsLarge (500+ staff) Multinational - 50 or more locations


Medium (100 - 499 staff) National - 10 or more locations











Large (500+ staff) Multinational - less than 50 locationsLarge (500+ staff) Multinational - less than 50 locations


2/21







Large (500+ staff) Multinational - 50 or more locationsLarge (500+ staff) National - 2 to 10 locations






















Medium (100 - 499 staff) Multinational - 50 or more locations







Small (1 - 99 staff) Multinational - less than 50 locations











Large (500+ staff) Multinational - 50 or more locationsLarge (500+ staff) Multinational - 50 or more locations













Large (500+ staff) Multinational - less than 50 locationsLarge (500+ staff) National - 2 to 10 locations


3/21







Large (500+ staff) National - 2 to 10 locationsMedium (100 - 499 staff) National - 2 to 10 locations












Select here Select here


Medium (100 - 499 staff) Multinational - 50 or more locations

















Small (1 - 99 staff) Multinational - 50 or more locations




4/21

What is your main industry sector? What level of manager is responsibl How is the BIA information collect

Financial services Middle manager Questionnaire

Banking Middle manager Face to face (Workshops)

Transport and logistics Middle manager Questionnaires and interviews with m

Other Senior manager Electronic surveyFinancial services Middle manager Excel-based BIA questionnaire for rol

Health products & services Middle manager email questionnaires

Public sector Middle manager By questionnaire and follow up meeti

Public sector Middle manager By questionnaire and follow up meeti

Financial services Senior manager Each Business area completes Annu

Public sector Middle manager Via one to one interviews with senior

Other Senior manager Interviews following a questionaire

Financial services Middle manager By conducting workshops, meetings,

Other Non-managerial Via interview for initial BIA.

Financial services Senior manager Via 1-1 meetings with business area

Health products & services Middle manager Meet with subject matter experts fro

Health products & services Senior manager Interviews only

Financial services Select here interview, questionnnaire

Public sector Senior manager Questionnaire's for each department

Computer software & services Senior manager By Questionnaires depending on the

Financial services Senior manager Templates and guidence notes. Mee

Telecommunications Junior manager Interviews and survey questionnaire

Public sector Middle manager Survey and follow up questions for cl

Financial services Middle manager electronically via email.

Public sector Non-managerial Questionnaire

Computer software & services Middle manager Interviews and questionaires

Banking Middle manager By Questionnaires followed by intervi

Banking Middle manager By Questionnaires followed by intervi

Financial services Middle manager Questionnaire

Financial services Middle manager Manual excel spread sheets.

Food, drink & tobacco production Senior manager Consultant-led workshop and follow-

Financial services Non-board director By face to face interview of Directors

Financial services Junior manager Questionnaire

Leisure Senior manager Via a series of face-to-face departme

Insurance Junior manager Survey and follow up interviews

Other Senior manager Via Questionaire with client. Across

Manufacturing Junior manager via paper form through snail mail or

Transport and logistics Non-board director Face to face structured interview usin

Other Middle manager By way of questionnaires and intervi

Other Senior manager by interview with key managers

Financial services Middle manager Interview

Transport and logistics Senior manager Checklist & template by the line man

Banking Non-managerial ^Personnal interview

Telecommunications Senior manager Via a series of interviews and predefi

Banking Senior manager Workshops, Interviews, questionnair

Other Middle manager ManuallyFinancial services Senior manager MS Word based template

Other Middle manager Interviews

Other Non-managerial It is not.

Other Select here Via workshops and interviews with ke

Public sector Senior manager survey

Public sector Middle manager Interviews and discovery meetings.

Financial services Middle manager workshops & self assessment survey

Computer software & services Middle manager Through the users

Select here Board director Survey templates.

Banking Non-managerial Questionnaire, generated and filled i

Banking Senior manager Unitwise data on BIA is collated for

Computer software & services Senior manager users a supplied with an information I

Financial services Senior manager integrated as part of the BRP six mo

Financial services Board director Meetings and workshops with each liEnergy Middle manager BIA information is collected in conjun


5/21

Computer software & services Senior manager Department heads at meetings

Financial services Non-board director Interviews with all senior staff followin

Banking Select here We are in the planning stage of our B

Aerospace & defence Senior manager Through combination of brainstormin

Other Middle manager Using checklists and questionnaires

Manufacturing Senior manager Through project plans and interviews

Other Non-board director Up to local BC managersInsurance Senior manager Interview style primarily.

Financial services Senior manager Via paper survey:

Banking Non-board director Brief questionnaire to gather (1) impa

Other Middle manager Through an interview process

Other Senior manager Face-to-Face interview of senior man

Other Junior manager surveys

Financial services Middle manager By interviews with business team, te

Manufacturing Middle manager questionnaire

Financial services Middle manager Interview, e-mail, departmental meeti

Financial services Non-managerial Form was designed and sent to all di

Computer software & services Senior manager

Construction Junior manager Interviews with operational managers

Financial services Middle manager By questionnaires sent annually to all

Insurance Junior manager MS Word Document - to work with ou

Computer software & services Senior manager By using Questionaries

Computer software & services Non-board director Interviews with business line leads a

Financial services Non-board director Through enterprise level Business R

Utilities Senior manager Specialist Consultancy appointed to

Financial services Middle manager interviews and questionnaires

Other Senior manager Strohl Systems BIA Tool

Other Non-managerial By interview.

Health products & services Non-board director

Financial services Senior manager Via software and then follow up calls

Other Senior manager Survey of staff

Financial services Senior manager Retained an external consultant

Health products & services Middle manager Interview templates

Insurance Middle manager Survey

Retailing Middle manager information is gathered during struct

Financial services Middle manager Template

Telecommunications Non-board director Access Data base survey questions li

Health products & services Middle manager Strohl Systems' BIA Pro; interviews,

Public sector Non-managerial Individual interviews with key manag

Financial services Senior manager Via questionnaire completed in 1-1 m

Other Non-managerial questionnaire, interviews, and querie

Health products & services Senior manager Electronic survey distributed to all de

Public sector Senior manager Using proforma and question forms

Public sector Middle manager Regionally (11 regions)

Financial services Senior manager Template completed by business ma

Financial services Middle manager Through questionairres directed at Pr

Computer software & services Middle manager interview and workshops

Financial services Middle manager BIA workbookInsurance Middle manager Currently via templates in MS Word

Financial services Middle manager Computerised model, done in one-o

Other Senior manager Use of Sthroll software and individual

Transport and logistics Board director Specifically assigned tasks to senior

Other Senior manager BIA software from Strohl Systems

Financial services Non-managerial Using BIA questionnaire software.

Financial services Non-managerial Manually

Transport and logistics Senior manager By teams reporting to divisional head

Financial services Non-managerial Surveys, Research, Statistics

Computer software & services Senior manager Unknown

Leisure Middle manager Survey (template) to all department

Financial services Middle manager Questionnaire plus interview

Financial services Senior manager Scenario analysis - critical systems,

Computer software & services Junior manager At meetingsUtilities Middle manager By Deaprtments and locations


6/21

Other Non-board director Formalised Questionnaire

Financial services Senior manager Through many sources:

Insurance Senior manager

Financial services Senior manager Formal survey and inventory of critica

Energy Middle manager

Public sector Middle manager

Financial services Select here divisional interviewsFinancial services Non-managerial Interviews with Managers + Worksho

Public sector Senior manager Agency Risk Register

Public sector Middle manager We conduct discovery meetings und

Other Senior manager The BIA form is distributed to each Di

Other Board director Desk study of background material -

Other Middle manager Via a survey form and on-site risk as

Other Non-managerial Each business head is responsible fo

Other Non-board director Usually via questionnaire designed b

Banking Senior manager Structured Risk Assessment Model

Energy Middle manager By identifying business processes fir

Insurance Middle manager survey document that is filled in by e

Banking Middle manager Through briefing and filling in BIA qu

Select here Select here

Insurance Junior manager Business areas' leaders complete onl

Financial services Senior manager Through discussion and sign off

Other Junior manager Through a survey

Banking Board director

Financial services Non-board director Criticality, financials, staffing, proces

Health products & services Non-managerial Survey

Financial services Middle manager Interviews using standard format an

Telecommunications Non-managerial

Banking Junior manager Questionnaire

Manufacturing Middle manager Meetings scheduled with the manag

Telecommunications Senior manager At individual business unit level

Banking Board director by department, using a document te

Financial services Senior manager Word documents completed, agreed

Other Middle manager Tool enabled, face-to-face interviews,

Other Senior manager Business process analysis is underta

Financial services Senior manager Interview, paper and electronic

Computer software & services Middle manager Questionnaire

Financial services Middle manager Written Survey with followup intervie

Manufacturing Senior manager BIA questionnaire is distributed for co

Financial services Middle manager the Plan owner approaches the Busi

Financial services Junior manager Individual meeting with business unit


7/21

Does your BIA cover eve Does your BIA cover eve How often do you cond How is the BIA inf Is the BIA information

Yes 1 time Spreadsheet for sor No

Yes Min 3 yearly Centrally collated b Yes

No In process of doing this BC plan has complete anPlanner develops

Yes required annually by corp Software program NoYes Are doing our first one. Still developing that.No

No Headquarters only - cost c 1-2 years spreadsheet Yes

Yes First one recently comple By hand, used to p No

Yes First one recently comple By hand, used to p No

Yes Standards are Annual or Reviewed directly w No

Yes Only one conducted to m Report presented to Yes

Yes once now, then every 2 Manually through d Yes

Yes is currently being done, l Entered in a databa Yes

Yes Annually Trying to obtain a to Yes

Yes Once with updates on a r Used as input into r No

No Wide and diverse busines Once in the lifetime of a Form / paperwork fil No

No IT with a business focus o once By the BC manage Yes

Yes as regularly as possible analysed against th No

Yes This process was carried out about 2 years a No

No NO ,as a fair answer , let's Not enough , mostly a th Data is somtimes p No

Yes 12-18 months, or when siCurrently analysed No

No Critical processes / functi Annually Collated and sum No

Yes Every 12 months or whe All information is an Yes

No The original BIA looked at annually Master copies of all Yes

Yes Have only just completed Responses are reta No

Yes Bi-annual or when major Analyzed by BC offi Yes

Yes annually manually Yes

Yes annually manually Yes

Yes 1 time Spreadsheet for sor No

No IT focus based on applicai Every two years Various views of th No

Yes This is the first Manual inspection, Yes

No Only large revenue produ Based on risk analysis d It is used to substan No

Yes BU has to document speciAt the project initiation a Information is sum Yes

Yes This is the first Consolidated into m Yes

Yes Annually Analyzed by continuYes

Yes Identifies all services and/ About one per quarter. We develop an exe Yes

No covers payroll and human has been done twice in t collated manually a Yes

Yes After each organisational Paper interview doc No

Yes Every 3 years or whenev It is analyzed base Yes

No key processes annually manual review No

Yes yearly Analyse, prioritizatioYes

Yes On significant change wit Line manager uses No

Yes BCPC decision to view all, Min. yearly, but continuo MS-Access databa No

Yes See above. BIAs are reviewed, rathe BIA Reports are pro No

Yes every 2 years excel sheets, matrix Yes

No Each division decides on it once per five years Cumulated mannualYesYes At the minimum annually, Once completed it i Yes

Yes Once every two years Final report with rec No

No Still in the process of integ Never N\A No

Yes once a year Analyzed, refined a Yes

Yes 6 mths spreadsheet Yes

Yes Every change in administ BIA Professional fro Yes

Yes Every 2 years analysis work done Yes

No IT division only once a year through report findi No

Yes Every change to any part We use SunGard's Yes

Yes Annually, and a monthly Automated reports Yes

No Non critical functions - m BIA is done Annually, bu BIA collated forms No

Yes Once a year or if there are significant change No

Yes 6 monthly database No

Yes At least annually, but mo Manually NoNo Any function that is deeme Done in conjunction with We are developing No


8/21

Yes Generally once but every built into our proce No

Yes Annually or more often if It is not processed, iNo

Yes We are planning to conducWe are using BIA Profes No Additionally, this inform

Yes Annual review, with ame Information is mana No

No Only those deemed critical Currently developing orig Yes

Yes When new systems are l LDRPS No

Yes New process, no history Up to local BC man YesYes Annually Entered into system No

Yes Annually Database No

Yes Annually Reports are prepareNo

Yes one time Yes

Yes As approved & required by Every 6 months, plus as Interpretation of res No

Yes annually carefully Yes

No This would be to cumbers Annually, or more often if It is analyzed for co No

No only pre-identified critical a every 5 yrs spread sheet No

No Areas that impact revenue Whenever there are signi It is used as referen Yes

Yes Currently doing the first suOnly when t6here are ch The Disaster Recov Yes

Yes Yes

No Those with a high IT relian Only once so far Diagramatically Yes

Yes Annually Through an MS Acc Yes

Yes Annually Excel No

Yes Every 2-3 years Manually Yes

No BIA has been completed f yearly database No

Yes Annually By utilizing our Rev No

Yes In some areas of the busin Introducing company wid Documented and ci No

Yes annually Yes

Yes annually electronically throuNo

Yes once a year Manuel by consulteNo

Yes Yearly+ Manually and teh B Yes

Yes Every 2 years Cmpiled onto sprea Yes

Yes Done once Collated by external Yes

No Business Applications deciOnce Information extracte Yes

Yes Once every 5 to 7 years: Furnished to senior Yes

Yes every five years, or whe questionnaires are No

Yes Annually Impact ratings are u Yes

Yes Either on an anual basis Measured against o No

Yes We are conducting one t We try to verify and No

Yes Every three years. Analyzed for RTO, cNo

Yes Initially with revisions req collated to determin No

Yes yearly reviewed by two-thr Yes

Yes This is the first, hoping to Survey Software an No

Yes every three years computer Yes

Yes Once, in 2000. Even the Regionally, first. N Yes

No Covers all divisions but is Every 2-3 years Reviewed by centra No

Yes Initial (all encompassing) Basically feeds into No

No Tends to be HQ focused every two years manually Yes

Yes Once every 3 years, or s BIA workbook form NoNo BIA is conducted for thos min 12 monthly or more f This is a somewhat No

Yes Yearly, or as business p On computer. AnalNo

Yes 1st was this year Use Sthroll software Yes

Yes Annually Report to board of dNo

Yes Annual BIA software from No

No Every area completes a BIAt least once a year, or Again, software doe No

No Corporate office only Every 2 years Reviewed and com Yes

Yes Annually Input into database, No

No Bank-wide any and all impAnnually Written Word docu No

No Unknown Unknown Unknown No

Yes Yearly Combined and brok Yes

Yes Infrequently. Manually, spreadshYes

Yes Scenario development o Presented to Syste No

No Just the critical areas, IT, Once a year The manager puts iYesYes Bi-annually Assimilated by Dis No


9/21

Yes Every 6 Months Reviewed by Busin Yes

team meetings, Disaster R Yes We conduct them o The data is reviewed fo

Interview with key manage Yes 2 yearly with annu Compiled into standar

Yes Annually Risk factors assess No

No Yes

Yes reviewed 6 monthly cross checked agai NoNo Key business funtions Annually: Report and speads Yes

Yes As often as the manager Centrally monitored No

Yes After every administratio We use excel and BYes

Yes annually Since the same fo No

Yes 6-monthly or on material analysed from a sp No

No Critical functions only -- th Annually. Reviewed by LC OpYes

Yes BIA are completed forma The information is c No

Yes In every company with w Cerified against any No

Yes Annually & whenever sig Prioritised for consi No

Yes Once every two years in It is used to develop No

No Only the critical areas are Every other year or a maWe use Strohls BIA Yes

Yes Do it once Analyze across fun No

Yes Quarterly Cross-referenced a Yes

Yes As per the security policy which is once in ye No

Yes every 18 mos Reviewed by BCP t No

Yes Yes

Yes Annually or more if nec Manually and auto No

No Many surveys pending At deployment of new ap entered into a spreaNo

Yes Annually, or when new p Into standard sprea Yes

No No

Yes Bi annual Cross analysis No

Yes At least once evry 3 year Using predetermin Yes

No Essential Functions only * 12 monthly Report & Presentat Yes

No currently business critical annually processed manaullyNo

Yes Annually but updated for Entered into spread No

No Only Mission Critical functi Not often enough Tool enabled and m Yes

Yes To be decided as part of Looking at tools to Yes

Yes full annually. project imp excel / access No

Yes so far only once, when w BCP coordinator an Yes

Yes Annual update to original MS Accexss, MS E No

Yes depends on criticality of f Used to ensure busiNo

Yes 2x a year it is placed into a sp Yes

Yes Update every three mont Spreadsheets upda Yes


10/21

Is the BIA information usWhat are the main diffic Are you planning to mak Are you planning to make any changes t

IT uses application/syste information accuracy, esp Yes include BIA questionnaire in change mana

User participation No

Timely return of informatio Yes Questionnaires will be completed in prese

used by variety of other deTime commitment require NoOur Internal Audit people Obtaining people's time a Yes Not sure yet - experience will drive this. I

questionnaires not returneYes Automation - software

Report issued for risk ma Getting the information fr No

Report issued for risk ma Getting the information fr No

Good summary source of i Each Business Area is un Yes Ever evolving process as the business are

Unrealistic timeframe for rYes

None so far. No

Difficult to decide what lve Yes Streamline as possible

In the course of the analy No

Information also used by I Lack of business impact i Yes Possibly - always revising and implementin

It is used to determine dis Availability of people with Yes Global acceptance and compliance.

separating IT and busine Yes Interviews and surveys. Encompass more

also by any other relevant t ime and resources No

By each of the service are 2 years ago problems werYes If any areas of improvement can be identifi

No , normaly this data is u It is very difficult to get ex Yes Yes , workgroups to (re-)evaluate the curre

The business will use the Consistency of informatio Yes Will be looking at gathering information ele

IS use for prioritising critic Obtaining time/ resource No

The knowledge level of te Yes I will be conducting awareness sessions pr

poor quality information prYes Greater participation by internal audit and

It has been used to help o Defining the functions and Yes Questions will be revised, added, dropped.

Territorial managers No

Getting it completed in a ti Yes Looking for more automated methods and

Getting it completed in a ti Yes Looking for more automated methods and

IT uses application/syste information accuracy, esp Yes include BIA questionnaire in change mana

End of life for legacy syste time and money Yes Acquire an automated system into a datab

Getting contributors to co No

To substantiate current ri Lack of due diligence on Yes I will stay away as much as I can from req

Obtain acurate informatio Yes Simplify the questions

Consistency of response No

Business is not will ing to take the take to complete the information for the survey

Interviewing the right peo No

getting support from exec No

It is also used by the IT de First time round, general i Yes We have historically covered buildings, s

Having the resources to No

for process improvement availability of key manag No

Lack of enthousiasm of in No

See 8. Line manager engageme Yes Piloting the process over the next few mon

A card of credit card size) Nobody's (Mngmt) willing Yes More and more formal regular reporting, th

Responsibility for creating Time - There's never eno No

resources availability, No

Getting senior manageme Yes Awareness and convincingCan be time consuming. No

Booking the actual meetin No don't know , first time it is done.

Not used If such an activity would e No

User involvement; ambigu Yes process of collecting information under rev

getting answers No

Delay in varifying accurac No We just recently changed our process.

lack of time and resource No

It is used for head of divis lack of cooperating and u No

Getting business people t No

Answer like : - its someone else responsibilities...

Scenario-based BIA data Consistency in approach No But we are constantly engaging to find a r

All so used by our BS779 None No Make it webbased

process interdependencie was difficult to get team le Yes ongoing improvements to make the gather

Used as part of the annual Change of management a Yes Restructure of the mechanism with possiblThere are numerous initiat Time -- or lack thereof. B Yes Although I cannot foretell what the change


11/21

the information is used to Time and resurces for a t No

Audit, technology and rep Finding the time, keeping Yes Intranet collected

Resource constraints are tNo

It is open for all to see. ThiMind set and culture. Fire Yes As the process matures the BIA will be am

Learning curve of BCP co Yes To address ALL functions/services

cooperation from others o No

Time allocation, lack of ex Yes As this is new to us it will inevitably be upDisaster Recovery Team Scheduling the meeting. No

All deparments review an Defining Criticality Yes Automate the process

The information is used to Getting across the import No

Consistency of the users No

Where critical systems ide Need to ensure response No It's taken awhile, but we think we've now g

No

Information Security is no Identifying anyone with a Yes Improve BIA templates, increase BIA temp

drp team also size of questionnaire No

Getting timely response frNo

1. Managers not completi Yes 1. Reformating the form 2. Additional que

No

Fixing appointments No

Encouraging managers to No

It's used for move plannin Identifying all of the depar No

People withou time to fulfilYes Not sure yet, although we are seeking new

Business process informa Scheduling Yes Improve the ability to quantify RTO and ad

The Office of Protective S Impacting the business Yes It is in a constant state of incremental impr

Used for System continuit Getting the involvement a No

delay in answer: No

To prioritize business pr mindset, standardization No

By the hwole oragnisation To get the information ab Yes A better interview with the senior manage

People do not understand No

1. Ensuring coverage of alYes Changing from procedure/process basis to

Management committmen No

Business Representative Yes Automate to a planning tool

Cooperation of the parties No

shared with other groups It can be difficult getting t No

Perception of which functi Yes Process under review as a Six sigma proje

By Risk manager to evalu Lack of will to perform the Yes Depends on the regulatory environment. T

Equipment on which critic the link between applicati Yes We plan on keeping it mainly in house wit

Used by IT to establish re Staff availability for intervi No

USed also by IT to review Difficult to quantify costs i Yes Unsure at present but always looking to im

much of the information i Yes moving toward greater reliance on informa

It will be used by Senior management to justify budg No

Apathy, obstruction, fear No

Follow-up and follow thro Yes Press for an annual internal regional revi

Used bu business areas t Getting business resource No

It is proving to be of great Lack of true business und No

costing impacts Yes reduce subjectivity increase precision

Support functions use the Documenting financial im NoIt is also used by/ in partn The 2 key difficulties are Yes Process to be aligned with new corporate

As explained above Expertise in business uni Yes Going over to the BCI's new Best Practice

Sr Mgt time, lack of preceiYes Will conduct it at lower levels withing the o

By auditors and Board for no real difficulty No

Business planning Key people completing th No

It can end up being used i The software we use is to Yes We are hoping we will be allowed to. Som

Getting the proper people No

Departmental heads given Response times, Weighti No

Risk Management team a Corporate wide cooperati Yes Allow it to cover business units individuall

Unknown I have not seen a BIA con Yes Unknown

Getting back all the docu No

Heavy on resources & ti Yes Need to run more frequently. *Possibly rev

Can be referred to as part Quantifying impacts: No

Employees do not think it NoAlso by Network Infrastru Time Frame in receiving i No


12/21

Ensuring Business Mana No

No Disaster Recovery Team, Buy in from all area's. It is No

No Available to managers to Collecting cost data No

BCP Executive Committe There are no significant " No

No

see above getting people to set asid Yes INSTRUCTING DIVISIONS TO INCLUDEEverything, but mainly coll Yes BIA review in November 2003

High impact risks are refe Assessments need to be Yes More sophisticated use of software to guid

Getting the necessary fun No We have just modified to this methodology

It is used by the Informati My priorities to capture t No

Business and department Availability for interview; Yes Increasingly BIA is being viewed as part o

Lack of management invo No

See above. The BIA are tApathy - reluctance to tak Yes Not specifically about the BIA but there ha

Also by change mangeme Lack of real knowledge of Yes develop more sophisticated, multi-level qu

To manage all operationa Lack of knowledge in rela Response to Basel committee in relation to capital adequacy

It is used every time one n Inconsistencies in the way Yes Will be amended to meet the requirements

Determing and collecting Yes last BIA was for the complete corporate en

Could be used for other ri Participation from the ma No

Getting all owners of plan Yes New system/process being introduced soo

Its used by all members o At times participants are Yes

IT uses the information to Management commitment No

Yes We are planning to make this a mandator

Audit, Technology, busin Time Yes Revamp to make easier for business unit

General reference S L O W turnaround of su No

BCP is normally always th Yes Easier to use

Yes

Time of participants Yes

Lack of any one individu Yes Nothing definative, but we want to modify

BCM is a long way down No

used by each department lack of buy-in from depart No

as above Too paper intensive Yes make the templates easier to underastand

Communicating purpose Yes Increase frequency of data refreshes

Validating the responses. Yes Always looking for better methods.

plan maintenance staff availability, sufficient Yes more process dependency emphasis

Subjective perceptions of Yes Work on more disaster scenarios, rather th

Feeds into requirements d Doing the survey, normali Yes Integrate into follow-on Application Impact

See above. Also used for Using the same questionnNo

explaining why the inform Yes we are expanding it

Business Continuity PlannNo


13/21

o your BIA procedure in the future? More info

gement/implementation process to keep it current. Review/update annually or bi-annually

ce of planner to assure everyone REALLY understands the requirement.

suspect future BIA iterations will include prior results for reference purposes.

as are learning, so are we, we are continually updating the Form and Process to ensure that it is as user friendly as possible for

g good practice as appropriate to business.

business functions into overall plans

ed from this current process once it has been completed than the programme/procedure will be up-dated and improved.

tn practise will look at it. The BIA is more and more becoming a Risk Management practise ...Regulations like Basel II in the fin

ctronically

ior to requesting the impact information. We have had a signifcant change in our management structure and all new managers

enior management.

We will also vary the frequency in which we administer the questionnaire to low priority business groups.

benchmarks

benchmarks

gement/implementation process to keep it current. Review/update annually or bi-annually

ase verses manual colleciton

uesting BIA info. via fil ling forms preferring multiple one on one interviews. Need to find a way to present the data in a ROI forma

stems and people but because of our increasing dependency on external suppliers we have added, in the last 6 months, critical

ths - this should lead to modifications in detail but is unlikely to change the concept.

rough scorcard, and check list.

iew. Other key resources will be influencial in providing information.

bust methodology

ed data more dynamic

e survey approach using a web site and browser based tools.might be, I can almost guarantee that changes will be required. That's the nature of business today!


14/21

ended to suit the needs of the business. Depending on feedback it may be lengthend or reduced, or terminology amended to en

ated and changed.

t the business groups to understand the value of independent BIA.

late options, improve use instructions, move to a more consistant methodology across the business (note - this decision is politi

tions to be added

paths and ways to get staff and managers involved in the whole process.

ability to measure cost impact using different methods.

ovement, based on industry best practices

ent

business outputs basis

ct.

he question is irrelevant if the plan documentation does not include the ability to change.

out use of consultants, and to maintain it.

prove. May gather from BCI Forum

tion in product database rather than on interviews and questionnaires. However, this will take time as not all the information for

w and rehearsals.

tandards and the overall process to be siimplified and made more user friendtly

s, implementing it enterprise-wide, awareness and education, re-engineering the whole BC policy, model, roles & responsibili tie

rganization

ething like an interview process would be much better than the way it is handled now.

iew automation/tools. *Would like to demonstrate risk better in terms of more accurate cost/analysis. *Improvements required to


15/21

IA IN 6 MONTHLY REVIEWS ON WORK SCHEDULESWITH ACTIONS COMPLETED AND SCHEDULE OF ACTIONS TO B

e and analyse the data

because we were having trouble getting members to participate in providing information as well as final approval on findings. F

the strategic business process - see answer to 9.

e been changes in the organisational structure with more responsibility placed upon the businesses and Group Operations and

stionnaire to make data collection quicker and easier . PS AS I am a consultant in BC and DR I have answered for the procedu

of people that use its results.

tity, the next will be for the local enterprise only.

n on international level.

requirement for annual business-plans.

to supply, probably web based

the analysis process.

and put it on a web page for ease of use.

an a total unavailability of building.

Analysis


16/21

all concerned.

ncial Industry will be drivers in this process

ill have to be briefed on the who, what and why.

t and in risk management terminology.

l suppliers.


17/21

sure consistent use.

cal and not beneficial to accurate BIA's)

all products is in the database.

, process and procedures

identify interfaces better.


18/21

E TAKEN

unding will always be an issue in a tough economy and a government entity.

the BCMF taking a lesser role.

res that I put into companies with whom I work. The main change for BIAs is going to be the drivers from regulatory, statutory,


19/21


20/21


21/21

nd contractual sources to ensure that the due process of BCM is carried oout.

bia survey raw data

Documents