Below we have taken the BC Planning Model from DRI
International and have found articles we've published over the years to help
explain each step a little further. DRI
International also offers in depth training courses which follow right along
with this planning model as well. To find out more about these classes
head to their website at www.drii.org
| We would also highly recommend viewing the GAP (Globally Accepted Pracices) document. The GAP document was created by
10 individual sub-committees of seasoned business continuity
professionals from partner organizations (ARMA, DRII, FSTC and NFPA)
and members from the public and private sectors. The mission of the
DRJ-EAB effort is “To be recognized as a leading source of ‘sound’
Generally Accepted Practices by providing a depository of knowledge and
recommendations offered by skilled business continuity practitioners.”
Here is a link to the GAP Project. |
Business Continuity Planning Model
SUBJECT AREA 1: Project Initiation and Management
Establish the need for Business Continuity Planning (BCP) within a Business Continuity
Management (BCM) Process, including resilience strategies, recovery objectives, business
continuity and crisis management plans, and including obtaining management support, and
organizing and managing the project to initiate the process to completion within agreed upon time
and budget limits.
SUBJECT AREA 2: Risk Evaluation and Control
Determine the events and external surroundings that can adversely affect the organization and its facilities with disruption as well as disaster, the damage such events can cause, and the controls needed to prevent or minimize the effects of potential loss. Provide cost-benefit
analysis to justify investment in controls to mitigate risks.
SUBJECT AREA 3: Business Impact Analysis
Identify the impacts resulting from disruptions and disaster scenarios that can affect the
organization and techniques that can be used to quantify and qualify such impacts. Establish
critical functions, their recovery priorities, and interdependencies so that recovery time
objective(s) and recovery point objective(s) can be set.
SUBJET AREA 4: Developing Business Continuity Strategies
Determine and guide the selection of alternative business recovery operating strategies for
recovery of business and information technologies within the recovery time objective, while
maintaining the organization’s critical functions.
SUBJECT AREA 5: Emergency Response and Operations
Develop and implement procedures for response and stabilizing the situation following an incident
or event, including establishing and managing an Emergency Operations Center to be used as a
command center during the emergency.
SUBJECT AREA 6: Developing and Implementing Business Continuity Plans
Design, develop, and implement Business Continuity and Crisis Management plans that provides continuity within the recovery time objective and recovery point objective.
SUBJECT AREA 7: Awareness and Training Programs
Prepare a program to create and maintain corporate awareness and enhance the skills required
to develop and implement the Business Continuity Management program or process and its
supporting activities.
SUBJECT AREA 8: Exercising and Maintaining Business Continuity Plans
Pre-plan and coordinate plan exercises, and evaluate and document plan exercise results.
Develop processes to maintain the currency of continuity capabilities and the Plan documents in
accordance with the organization’s strategic direction. Verify that the Plans will prove effective by
comparison with a suitable standard, and report results in a clear and concise manner.
SUBJECT AREA 9: Public Relations and Crisis Coordination
Develop, coordinate, evaluate, and exercise plans to communicate with internal stakeholders
(employees, corporate management, etc.) external stakeholders (customers, shareholders,
vendors, suppliers, etc.) and the media (print, radio, television, Internet, etc.)
SUBJECT AREA 10: Coordination With External Agencies
Establish applicable procedures and policies for coordinating response, continuity, and
restoration activities with external agencies (local, state, national, emergency responders,
defense, etc.) while ensuring compliance with applicable statutes or regulations.
|