Definitive Handbook Business Continuity

THE DEFINITIVE HANDBOOK OF BUSINESS CONTINUITY MANAGEMENT
2ND EDITION
Andrew Hiles (Editor)

How long would your business survive an interruption? What if operations were destroyed by
fire or flood, negative media drives away customers or the company database is stolen or
infected by a virus? How well are you prepared to deal with disaster?

This comprehensive guide tells you why you need a plan and then will help you put one
together, including fully updated, detailed glossary and additional examples from the USA,
Australia and Europe. Clearly split into useful sections, the book is easy to navigate.

The Definitive Handbook of Business Continuity Management has been revised and updated
to reflect new regulations and standards by one of the top international authorities in the field,
this is an important book for anyone within the business continuity industry.

Seven new chapters include coverage of: US Homeland Security measures relating to IT; UK
Civil Contingencies Act relating to business continuity; NFP 16000 (US National Fire
Prevention Association 1600 Business Continuity standard); British Standards
Institution/Business Continuity Institute Publicly Available Standard 56 and other current and
upcoming standards; Other emerging standards: Singapore standard for Disaster Recovery
service providers, Australia & New Zealand standards; Pandemic planning

With contributions from leading practitioners in the industry, The Definitive Handbook of
Business Continuity Management has established itself as an invaluable resource for anyone
involved in, or looking to gain a detailed appreciation of, the rapidly emerging area of business
continuity and disaster recovery within the corporate environment.

- - - - - - - -

"incredibly detailed and useful ... the glossary is a real godsend for anyone new to the topic" -
Justin Doherty and Jamie Ayres in ft.com

"excellent overview ...extremely informative ...this book will tell you why you need a (business
continuity has never looked so good!" - Secure Computing

"extremely authoritative book ...a particularly useful element ...is the very comprehensive
case studies appendix ...in (which) over 20 actual incidents are discussed" - Security
Management and Industry Today

- - - - - - - -

With a pedigree going back almost ten years, THE DEFINITIVE HANDBOOK OF BUSINESS
CONTINUITY MANAGEMENT can rightly claim to be a classic guide to business risk
management and contingency planning, with a style that makes it accessible to all business
managers. Some of the original underlying principles remain the same – but much has
changed. This is reflected in this radically updated second edition, with exciting and helpful
new content from new and innovative contributors, bringing the book right up to the minute.

This book combines over 500 years of experience from leading Business Continuity experts
of many countries. It is presented in any easy-to-follow format, explaining in detail the 10 core
BC activities incorporated in the common body of knowledge agreed by the Disaster
Recovery Institute International and the Business Continuity Institute.

Contributors from America, Asia, Australia, Europe, India and the Middle East provide a truly
global perspective, bringing their own insights and approaches to the subject, sharing best
practice from the four corners of the world.

We explore and summarize new legislation, guidelines and standards impacting BC planning
and management and explain their impact.

The structured format, with many revealing case studies, examples and checklists, provides
a clear roadmap, simplifying and de-mystifying business continuity processes for those new
to its disciplines and providing a benchmark of current best practice for those more
experienced practitioners.

This book makes a massive contribution to the knowledge base of BC and risk management.
It is essential reading for all business continuity, risk managers and auditors: none should be
without it.

- - - - - - - -

CONTENTS

Contributors.

Foreword (Lyndon Bird).

Preface (David Honour).

Introduction (Andrew Hiles).

An introduction to business continuity planning (Andrew Hiles).

How to use this book (Andrew Hiles).

Section One Achieving and maintaining business continuity: an executive overview.

1 What are we planning for? (Geert Vancoppenolle).

2 What is a business continuity planning (BCP) strategy? (Mike O’Hehir).

3 A crisis management perspective of business continuity (Robert Heath).

4 Multilateral continuity planning (Dennis C. Hamilton).

5 Marketing protection: a justifi cation for funding of total asset protection programmes?
(Andrew Hiles).

6 Operational risk management (Peter Viner).

7 Business strategy and business continuity planning (Ranjit Kovilinkal Ramakrishnan and
Satish Viswanathan).

Section Two Planning for business continuity: a ‘how-to’ guide.

8 The business continuity planning methodology (Malcolm Cornish).

9 Project initiation and management (Jayne Howe).

10 Risk evaluation and control: practical guidelines for risk assessment (Ian Charters).

11 Business impact analysis (Peter Barnes).

12 Developing business continuity strategies for the business or work areas (Neal Courtney).

13 Business continuity strategies for fi nancial services (Jillian Simms).

14 Business continuity strategies for manufacturing and logistics (Melvyn Musson).

15 Business continuity for telecommunications (Paul F. Kirvan).

16 Strategies for IT and communications (Michael Smith and Piper-Anna Shields).

17 Planning to recover your data (Thomas Carroll).

18 Strategies for funding recovery (Danny Rowland).

19 Emergency response and operations (Gregg C. Beatty).

20 Developing and implementing the written plan (Andrew Hiles).

21 Awareness and training (Andrew Hiles).

22 BC plan testing (Tim Armit).

23 BC audit (Rolf von Rössing).

24 Selecting the tools to support the process (Lyndon Bird).

25 Coping with people in recovery (Allen Johnson).

26 The missing elements (Andrew Hiles).

Appendix 1 Case studies (Peter Barnes and Andrew Hiles).

An introduction to the case study section.

A1A Storm, earthquake, explosion – a general overview.

A1B Living nightmares – some apocryphal tales.

A1C World Trade Center explosion 26 February 1993.

A1D Hurricane Andrew, Miami – 24 August 1992.

A1E Chicago fl oods – 13 April 1992.

A1F Thirty seconds of terror! The California earthquake.

A1G After the Fire – First Interstate Bank, Los Angeles.

A1H One Meridian Plaza, Philadelphia.

A1I The Mercantile fire.

A1J How fl oods can ruin your day: London College of Printing.

A1K Flood highlights.

A1L A cautionary tale.

A1M It happened to them.

A1N Fire highlights.

A1O Wessex Regional Health Authority.

A1P The Bishopsgate bomb – 25 April 1993.

A1Q City bomb blast: St Mary Axe – 10 April 1992.

A1R Explosion roundup.

A1S Stop thief!

A1T Miscellaneous highlights.

A1U Lessons in risk management from the Auckland power crisis.

A1V Foot and mouth: a preventable disaster.

A1W The Madrid rail bombings – 11 March 2004.

A1X Istanbul bombings – November 2003.

A1Y London bombings – 7 July 2005 (7/7).

A1Z Buncefi eld (UK) oil terminal disaster – 11 December 2005.

Appendix 2 General guideline notes (Andrew Hiles).

A2A Risk: a process approach.

A2B Data loss: where did it go?

A2C The role of insurance.

A2D Five nines: chasing the chimera?

A2E Consultancy without tears.

A2F Financing business continuity: why is it a problem?

A2G Pandemic planning (Malcolm Cornish).

Appendix 3 Certification standards.

Certification standards for business continuity practitioners.

Appendix 4 International perspectives, standards and sources.

A4A The implications of recent legislation and standards on business continuity (Andrew
Hiles).

A4B Business continuity management: an international perspective from the BCI (Lyndon
Bird).

A4C Business continuity planning in Asia (Alan Craig).

A4D Useful international contacts.

Glossary of general business continuity terms.

Index.

- - - - - - - -

ANDREW HILES was founder and Chairman of the first international user group for business
continuity and disaster recovery planning; founding Director and first Fellow of the Business
Continuity Institute; and a founder of the World Food Safety Organisation.

He is an acclaimed international presenter on risk and business continuity management and
author of five other books on these topics - some are required reading at universities across
North America and the Middle East.

As a Director of Kingswell International, Andrew delivers consultancy, workshops and
seminars across Europe, the Pacific Rim and Australasia, North and South America, India,
the Middle East, India, China and Africa and has presented on radio and television.

In 1999 he was nominated for lifetime achievement at the Business Continuity Institute /
Corporate Insurance and Risk Awards in London and in 2004 he was inducted to the BC Hall
of Fame by CPM magazine in Washington DC.

- - - - - - - -

ISBN: 978-0-470-51638-6
Hardcover, 666 pages
January 2008
ORDER #DR827

4 Arapaho Rd.

Brookfield, CT 06804-3104 USA

1-888-ROTHSTEin; (888.768.4783)

Telephone: 203.740.7444; 888.768.4783

Fax: 203.740.7401

"Keep Me Posted" Business Survival Newsletter