Continuity and Resilience (CORE)ISO 22301 BCM Consulting FirmPresentations by speakers at the

4th India Business & IT Resilience Summit 7th October, 2016 | Hotel Hilton, Mumbai India

Our Contact Details:

INDIA UAE

Continuity and ResilienceLevel 15,Eros Corporate Tower

Nehru Place ,New Delhi-110019Tel: +91 11 41055534/ +91 11 41613033

Fax: ++91 11 41055535Email: ms@continuityandresilience.com

Continuity and ResilienceP. O. Box 127557

Abu Dhabi, United Arab EmiratesMobile:+971 50 8460530

Tel: +971 2 8152831 Fax: +971 2 8152888

Email: info@continuityandresilience.com

October 7, 2016 2

BCM Program-Getting started

S SeshadriHead – Consulting, CORE

4th Biz & IT Resilience Summit, Mumbai

Establishing a BCMS

• Why implement BCM?• Requirements for BC, based on– Organisation’s context and objectives– Legal, regulatory, and contractual requirements– Interested parties– Products and services– Customers

October 7, 2016 3

Business Continuity

Before

During

After

Risk Reduction

Response

Recover

4October 7, 2016

Business Continuity Management

EMER

GEN

CY

MA

NA

GEM

ENT

IT D

ISA

STER

REC

OV

ERY

FAC

ILIT

IES

MA

NA

GEM

ENT

HU

MA

N R

ESO

UR

CES

SEC

UR

ITY

CR

ISIS

CO

MM

UN

ICAT

ION

S &

PR

KN

OW

LED

GE

MA

NA

GEM

ENT

SUPP

LY C

HA

IN M

AN

AG

EMEN

T

QU

ALI

TY M

AN

AG

EMEN

T

HEA

TH &

SA

FETY

RIS

K M

AN

AG

EMEN

T

ENV

IRO

NM

ENTA

L M

AN

AG

EMEN

T

Involve all Elements of the Organisation

Note: Source – BSI/BCI 5October 7, 2016

• BCM is based on a ‘lifecycle’ – it is a continuous process

• Must become part of the organizational culture• Commitment from the top, and throughout the

organisation• Based on impacts – not just threats• BCM must be proven by exercise and lessons

learnt• BCM must be maintained in a changing

environment

Key Elements of the Standard

October 7, 2016 6

Key Program Initiation Issues

• Identifying the Scope• Aligning with organization’s objectives• Issuance of BCM Policy• Ownership and accountability• Roles and responsibilities• Skills and competencies • Assumption and limitations• Schedule and Budget• Implementation• Ongoing support

7October 7, 2016

• What are their requirements and perceptions?• Who are they?• Shareholders, Customers, Employees and Suppliers• Regulators, Financial Investors, Insurers, Auditors,

Professional Bodies, Trade Associations, Government Departments

• Competitors, the Community, Media and ‘Vested Interest’ Groups

Interested Parties

October 7, 2016 8

Leadership

October 7, 2016 9

• Display thought leadership• Provide guidance• Encourage and motivate• Decide, and communicate • Define Risk Appetite• Provide resources• Establish BCM Policy• Participate in tests• Review & enable continual improvement

Planning

October 7, 2016 10

• Procedure/ methodology for• Risk Appetite• Regulatory Requirements• Business Impact Analysis• Risk Assessment• Strategies Development• Plan Development• Exercising• Reviewing and monitoring• Performance Evaluation• Continual improvement• Management Review• Internal Audit• Corrections and CAPA

Support

October 7, 2016 11

• The organisation shall commit to support its BCMS by providing the following

– Resources– Competence– Awareness– Communication– Documented information

October 7, 2016 12

The ‘silo’ syndrome

• Business Continuity• IT Service Continuity• IT Disaster Recovery• Information Security• Risk Assessment

October 7, 2016 13