A Category 5 hurricane is on its way to your bank or hospital! Are you ready to save lives and millions of dollars? We know how you feel and we can help! Below are the different services and areas that we are focused on.
Business Continuity Plan Development, Assessment and Management
Disaster Recovery Institute International (DRII) defines Business Continuity Management (BCM) as “a holistic management process that identifies potential impacts that threaten an organization and provides a framework for building resilience with the capability for an effective response that safeguards the interests of its key stakeholders, reputation and value creating activities.”
The primary objective of BCM is to allow the Executive to continue to manage business operations under adverse conditions, by the introduction of appropriate resilience strategies, recovery objectives, business continuity, operational risk management considerations and crisis management plans.
Business Continuity is not important only to large organizations. According a survey from the Gartner Group, 85% of large organizations in the US have some sort of Business Continuity Plan. Only 25% of small businesses have focused on developing and maintaining a plan. The Occupational Safety and Health Administration (OSHA) now require small business to have an Emergency Action Plan.
At BCMPros, we provide expert consulting for the core areas within the Business Continuity Professional Practices.
Risk Analysis and Risk Assessment
The Risk Analysis will determine the risks (events or surroundings) that can adversely affect the organization and its resources (example(s) include: people, facilities, technologies) due to business interruption; the potential loss of such events can cause and the controls needed to avoid or mitigate the effects of those risks. Risk Assessment, represents the assignment of value to assets, threat frequency, consequence and exposure factors, and other elements of change. As an outcome of the above, a cost benefit analysis will be required to justify the investment in controls.
Business Impact Analysis (BIA)
The Business Impact Analysis (BIA) will identify the impacts resulting from business interruptions that can affect the organization and techniques that can be used to quantify and qualify such impacts. We will identify time-critical functions, their recovery priorities, and inter-dependencies so that recovery time objectives can be established and approved.
Business Continuity Strategies
We will then leverage the outcome of the BIA and Risk Analysis to develop and recommend business continuity strategies. The basis for these strategies includes consideration of both the recovery time objectives (RTO) and recovery point objectives (RPO) to assess and plan for support of the organization’s critical functions.
Emergency Preparedness and Response
In this focus area, we will identify an organizations’ readiness to respond to an emergency in a coordinated, timely and effective manner. We will develop and implement procedures for initial response and stabilization of situations until the arrival of authorities having jurisdiction.
Business Continuity Plan
We will guide the designing, developing, and implementing of the Business Continuity Plans that provide continuity and/or recovery as identified by the organization’s requirements. We will identify requirements for the development of the plan, design a framework for the plan development, identify the process to support the plan, and publish the completed plan. The Business Continuity Plan could be a compilation of different continuity plans throughout the organization like an Emergency Response Plan, Contingency Plan, and Disaster Recovery Plan. We will work with your organization to assure the plans complement each other.
Awareness and Training Programs
We will prepare a program to establish and maintain corporate awareness that Business Continuity Management (BCM) is a part of normal business management and to develop and enhance the skills required to create and implement BCM.
Plan Exercise, Audit and Maintenance
Your organization can have a very detailed Business Continuity Plan but without an exercise/testing program, it is almost useless. We help you establish a program which documents plan exercise requirements including the planning, scheduling, facilitation, communications, auditing and post review documentation. We will also establish a maintenance program to keep plans current and relevant. Our professionals will establish an audit process which will validate compliance with standards, review solutions, verify appropriate levels of maintenance and exercise activities and validate the plans are current, accurate and complete. We will also provide documentation and evidence to third party auditors, hired by your organization, to audit the Business Continuity Process managed by BCMPros.
Develop and document the action plans to facilitate communication of critical continuity information. Coordinate and exercise with stakeholders and the media to ensure clarity during crisis communications.
Coordination with External Agencies
We will establish applicable procedures and policies for coordinating continuity and restoration activities with external agencies (local, regional, national, emergency responders, defense, etc.) while ensuring compliance with applicable statutes and regulations.