BUILDING AN ENTERPRISE-WIDE BUSINESS CONTINUITY PROGRAM
by Kelley Okolita
This New Book offers Step-By-Step Instruction on Developing and Implementing an
Enterprise-Wide Business Continuity Program.
If you had to evacuate from your building right now and were told you couldn’t get back in for
two weeks, would you know what to do to make sure your business continues to operate?
Would your staff? Would every person who works for your organization?
Increasing threats to business operations, both natural and man-made, mean a disaster
could occur at any time. It is essential that corporations and institutions develop plans to
ensure the preservation of business operations and the technology that supports them should
risks become reality.
BUILDING AN ENTERPRISE-WIDE BUSINESS CONTINUITY PROGRAM goes beyond
theory to provide planners with actual tools needed to build a continuity program in any
enterprise. Drawing on over two decades of experience creating continuity plans and
exercising them in real recoveries including 9/11 and Hurricane Katrina. Master Business
Continuity Planner, Kelley Okolita, provides guidance on each step of the process, including
how to validate the plan as well as time-tested tips for keeping the plan action-ready over the
course of time.
Disasters can happen anywhere, anytime, and for any number of reasons. However, by
proactively planning for such events, smart leaders can prepare their organizations to
minimize tragic consequences and readily restore order with confidence in the face of such
adversity.
- - - - - - - -
FEATURES
- Includes a sample plan and helpful tips for getting started
- Contains easy-to-implement strategies
- Explains how to maintain a constant state of readiness
- Provides access to downloadable tools
- Presents the insight of a Master Business Continuity Planner (MBCP) who has created
and implemented continuity plans for all types of disasters–including Katrina and 9/11
- Supplies change agents with the tools to sell a continuity program to senior leadership
- - - - - - - -
TABLE OF CONTENTS
INTRODUCTION: WHERE IT ALL BEGAN FROM SOMEONE WHO WAS THERE
A HISTORY OF BUSINESS CONTINUITY AND DISASTER RECOVERY
BUSINESS CONTINUITY VS. DISASTER RECOVERY – WHAT’S THE DIFFERENCE?
DATA CENTER DRIVEN TO BUSINESS DRIVEN
SELLING THE PROGRAM
* Why It Matters
* Why No One Believes In the “Big” One
* Finding the One They Can’t Say “So What” or “It Will Never Happen” to
PROJECT INITIATION AND MANAGEMENT – WHO, WHAT, WHEN
* Your Planning Team and How to Find Them
* Key Deliverables
* The Project Plan
RISK EVALUATION AND CONTROL
* Risk Management 101 – Elements of Risk
* Most Common Risks and Controls for Them
* Industry Risks
* Natural Hazard Risks
* Don’t Forget the Neighbors
* Where to Spend Your Mitigating Dollars
* What Risks You Should be Building Plans For
BUSINESS IMPACT ANALYSIS
* What is It?
* Why It’s About Time Sensitivity, Not Criticality
* Assessing Impacts – Dollars, Customers and Regulators
* How to Do This and Get it Right
* Sample BIA Survey
* A Sample Simple BIA Form
RESOURCE REQUIREMENTS
* How Many, What Type, and Where
* Interdependencies—Who Else Needs to Know/Who Else Needs to Help
* Technology Reviews—Business People and Technology People Speak Different
Languages
* Vital Records Program
* The End Product—The Business Function Index
RECOVERY STRATEGIES
* What Are the Options and What’s good and Bad about Them?
* Selecting a Recovery Strategy
* Performing a Cost/Benefit Analysis
* Selling the Solution to Management
* Implementing the Recovery Strategies
DOCUMENTING THE PLAN
* What Are the Components of the Plan?
* The Sample Plan
* How to Use the Sample Plan
* Distribution of the Plan
* Plan Maintenance Strategies
TRAINING AND AWARENESS
* The Question
* Different Training for Different People
* Training Methods
TESTING THE RECOVERY PLANS
* The First Rule of Testing
* Types of Tests and When to Use Them
* Test Planning
* Test Execution
* Why You Cannot Fail
* Test Reporting
* Test Schedules
* Technology Testing Questions
* Business Testing Questions
* Sample Test Plan
* Sample Test Report
COORDINATING WITH PUBLIC AGENCIES
* What You Can Expect From Them
* Who You Should Have a Relationship With Before There is a Crisis
* How to Engage Them in Your Program
* Who Are the Regulators in Your Industry?
CRISIS MANAGEMENT
* What Happens When It Happens for Real
* Crisis Management as Part of Your Program
* Event Management Process- How to Build a Process to Handle All Events that Impact
Your Company so You Can Practice the Process Every Day
* Crisis Management Exercises
* Crisis Leadership Training for Your Senior Team
CRISIS COMMUNICATIONS
* Handling the Media
* Communicating to Customers
* Communicating to Vendors
* Communicating to Employees
* Basic Dos and Don’ts of Media Communications
* Prepared Messages
* Methods and Tools of Effective Communications
PANDEMIC PLANNING
* Why is it Different?
* What is a Pandemic?
* Pandemics in the Last Century
* What is “Bird Flu” and Why are We Worried
* Pandemic Planning Assumptions from the CDC
* What a Pandemic Could Mean to Your Business
* What You Should Do Now To Be Prepared
* Pandemic Planning Checklist
LIFE SAFETY
* Floor Wardens
* Evacuation Drills
* Assembly Areas
* Workplace Violence Programs
INDUSTRY CERTIFICATIONS
BUSINESS CONTINUITY AT HOME
* Be Ready When a Disaster Strikes You Personally
THE REGULATORY ENVIRONMENT
OTHER AREAS OF RISK MANAGEMENT THAT MATTER TO BUSINESS CONTINUITY
* Physical Security
* Information Security
* Records Management
* Privacy
* Vendor Management
* Operational Risk Management
* Internal/External Audit
THE FUTURE OF BUSINESS CONTINUITY
SUMMARY
* Step 1 …
WHERE TO GET ADDITIONAL INFORMATION
* Suggested Websites
* Suggested Reading
* Industry Conferences
* Vendors
- - - - - - - -
2009, 344 pages.
ISBN-10: 1420088645
ISBN-13: 978-1420088649
Order #DR844.
- - - - - - - -
Rothstein Associates Inc.
4 Arapaho Rd.
Brookfield, CT 06804-3104 USA
1-888-ROTHSTEin; (888.768.4783)
Telephone: 203.740.7444; 888.768.4783
Fax: 203.740.7401