A Business Disaster is defined as a sudden, unplanned, severe interruption of normal business activities. How will your business react and perform when disaster strikes?
Business calamities are not just associated with your computer systems. A Business Recovery program not only includes the IT aspects of your business but also the entire organization’s function and behavior.
We like to start with a Business Impact Analysis (BIA). In a BIA, we help your company estimate the impact of an interruption on its income, employees, customers and its reputation. We collect this information through meetings with managers, interviews with employees, and by distributing questionnaires to selected individuals. Questionnaires can be distributed in print, by email or on the Internet.
It is essential to estimate Recovery Time Objectives (RTO) and Minimum Operating Requirements (MOR) during the Business Impact Analysis. These help to determine which continuity strategy would be best for the recovery of each business activity or department. Strategies might include moving to another location, delaying the performance of some tasks, or transferring some work to another office.
We can help your company's executives estimate impact and recovery requirements in as little as one morning or afternoon meeting.
Some companies then want to identify and quantify the potential threats to their businesses. That process is called a Risk Analysis (RA). In risk analysis, we examine threats into three (3) categories: natural threats, technical threats and human threats. A threat can be a power failure, a sprinkler discharge, a software virus or the loss of a big customer, for examples. Many companies already know their most likely threats.
We assess risk by estimating the likelihood that selected threats will happen to your business, and estimating the impact on your business if those threats were to happen. Some threats have a low likelihood of occurrence, but a very high impact if they occur. Others are more likely, but have lower impact on your business when they happen. Our experience as professional planners adds significant value to the process of helping your company decide which of the many possible risks your business continuity plan (BCP) should address.
When we know the risks and the impact, we propose appropriate continuity strategies to meet the cost-benefit and recovery time requirements you have approved during the BIA process. Having a recovery site is often recommended, especially for IT systems. Suspending some parts of your business temporarily may also be an appropriate strategy. Serving customers and receiving revenue are always top priorities.
Then we write a plan based on your business objectives and the continuity strategies your company chooses. We write your plans using software you choose; we can even publish your company's BCP on a private BCP intranet web site for your company, which we setup and maintain for you.
To prepare your BCP, we ask questions like:
• What could go wrong? What are the possible threats to your facilities and business functions?
• What is likely to go wrong? How could you reduce the risk of something going wrong?
• If something went wrong, how would it affect your business?
• What are the best continuity strategies to achieve your Recovery Time Objectives? For example, if you want customers to be able to reach you by telephone within one (1) day after a disaster, have you selected an appropriate strategy for your telephone system to make that possible?
• Is your plan in writing?
• Is your plan available to all employees?
• Has your company practiced or tested your BCP in the last six (6) months?
For more information and initial analysis please contact me stevehomola@gmail.com, we can assist your business in a smooth, continuous operation regardless of the unforeseen events in your business life.
No comments:
Post a Comment