2016-545-E Risk Mgmt. - Willis of North Carolina - Business Continuity Planning

Browse Search

DocuSign Envelope ID:FCC003D1-05FF-4218-868F-50402CE3790D The Professional Practices are a body of knowledge designed to assist organization in the development and implementation of a business continuity management(BCM)program. Use of the Professional Practice framework can increase the likelihood that no significant gaps will be present in your program as well as increase the likelihood that the various parts of the program will work cohesively in an actual event. Furthermore,these Professional Practices are intended to serve as both a guide for BCM Program development,implementation and maintenance and as a tool for conducting audits of an existing program. Project Initiation and Management Establishes the need for a Business Continuity Plan,including management support at all levels of the organization. It is important to organize and manage the project to completion within agreed upon time and budget limits. Risk Evaluation and Control This step determines the frequency and severity of natural,man-made, and political perils that can effect the organization and its facilities. By identifying and quantifying these exposures, controls can be implemented to mitigate them as well as provide a cost-benefit analysis to justify investment in these controls. Business Impact Analysis (BIA) Identifies the impacts resulting from a disaster by utilizing techniques that identify critical organization/departmental functions. This helps establish recovery priorities such as the number of personnel needed, the type of equipment needed, and the organizations inter-dependencies so recovery time objectives (how quickly functions need to be restored) can be set. Developing Business Continuity Strategies Selects recovery-operating strategies for business and information technologies. This includes such methods as utilization of a commercial hot-site, duplication of key records, contractual agreements, off-site storage, etc. Developing and Implementing Business Continuity Plans Designs, develops and implements the physical document that is formulated as a result of the risk evaluation and business continuity strategies that were developed/performed. Maintaining and Exercising Business Continuity Plans Develops processes to test the plan and procedures to maintain plan currency to continue the organizations ability to respond to a disaster. Emergency Response and Operations Develops and implements procedures for responding to and handling a disaster. This includes establishing and managing the Emergency Operations Center, designating a person who is in charge and a framework for dealing with the overall management of the incident. Awareness and Training Programs Develops a program to create corporate awareness and enhance the skills required developing, implementing,maintaining, and utilizing the developed plans. 12 I :I[" ;