Developing An Enterprise Continuity Program

The book discusses the activities involved in developing an Enterprise Continuity Program (ECP) that will cover both Business Continuity Management (BCM) as well as Disaster Recovery Management (DRM). The creation of quantitative metrics for BCM are discussed as well as several models and methods that correspond to the goals and objectives of the International Standards Organisation (ISO) Technical Committee ISO/TC 292 "Security and resilience”. Significantly, the book contains the results of not only qualitative, but also quantitative, measures of Cyber Resilience which for the first time regulates organizations’ activities on protecting their critical information infrastructure. The book discusses the recommendations of the ISO 22301: 2019 standard “Security and resilience — Business continuity management systems — Requirements” for improving the BCM of organizations based on the well-known “Plan-Do-Check-Act” (PDCA) model. It also discusses the recommendations of the following ISO management systems standards that are widely used to support BCM. The ISO 9001 standard "Quality Management Systems"; ISO 14001 "Environmental Management Systems"; ISO 31000 "Risk Management", ISO/IEC 20000-1 "Information Technology - Service Management", ISO/IEC 27001 "Information Management security systems”, ISO 28000 “Specification for security management systems for the supply chain”, ASIS ORM.1-2017, NIST SP800-34, NFPA 1600: 2019, COBIT 2019, RESILIA, ITIL V4 and MOF 4.0, etc. The book expands on the best practices of the British Business Continuity Institute’s Good Practice Guidelines (2018 Edition), along with guidance from the Disaster Recovery Institute’s Professional Practices for Business Continuity Management (2017 Edition). Possible methods of conducting ECP projects in the field of BCM are considered in detail. Based on the practical experience of the author there are examples of Risk Assessment (RA) and Business Impact Analysis (BIA), examples of Business Continuity Plans (BCP) & Disaster Recovery Plans (DRP) and relevant BCP & DRP testing plans. This book will be useful to Chief Information Security Officers, internal and external Certified Information Systems Auditors, senior managers within companies who are responsible for ensuring business continuity and cyber stability, as well as teachers and students of MBA’s, CIO and CSO programs.

If you had to evacuate from your building right now and were told you couldn’t get back in for two weeks, would you know what to do to ensure your business continues to operate? Would your staff? Would every person who works for your organization? Increasing threats to business operations, both natural and man-made, mean a disaster could occur at any time. It is essential that corporations and institutions develop plans to ensure the preservation of business operations and the technology that supports them should risks become reality. Building an Enterprise-Wide Business Continuity Program goes beyond theory to provide planners with actual tools needed to build a continuity program in any enterprise. Drawing on over two decades of experience creating continuity plans and exercising them in real recoveries, including 9/11 and Hurricane Katrina, Master Business Continuity Planner, Kelley Okolita, provides guidance on each step of the process. She details how to validate the plan and supplies time-tested tips for keeping the plan action-ready over the course of time. Disasters can happen anywhere, anytime, and for any number of reasons. However, by proactively planning for such events, smart leaders can prepare their organizations to minimize tragic consequences and readily restore order with confidence in the face of such adversity.

This comprehensive how-to guide captures the distilled wisdom and experience of Jim Burtles, a founding fellow of the Business Continuity Institute; an internationally renowned figure in business continuity with over 30 years of experience and teaching across 22 countries; and a veteran of practical experience that includes recovery work with victims of events such as bombings, earthquakes, storms and fires, along with technical assistance/ support in more than 90 disasters, and advice/guidance for clients in over 200 emergency situations. As such, this book is a gold mine of practical information, based on solid theoretical underpinnings. It is an ideal combination of the practice of business continuity - standards, best practices, global perspectives - and, the process of business continuity - planning, development, implementation, and maintenance. Jim presents a clear picture of not only how to do what needs to be done, but why. By striking a balance between theory and practice, Jim's approach makes the reader's job much easier and more effective. Illustrated with numerous charts, forms and checklists, the book covers business continuity management from start to finish: understanding risks; assessing impact and developing a Business Impact Analysis; choosing contingency strategies; emergency response processes and procedures; salvage and restoration; disaster recovery; developing business continuity plans, including those for business continuity, emergency response, crisis management, function restoration, and disaster recovery; maintaining long term continuity; reviewing and auditing plans; exercising and testing plans; crisis management; dealing with various personnel issues before, during and after a crisis; and working with a variety of agencies and people, including local authorities, regulators, insurers, fire and rescue personnel, and neighbors. This comprehensive reference based on years of practical experience will ensure that the reader is in a position to engage in all of the activities associated with the development, delivery, exercise and maintenance of a business continuity program. There is a glossary of 90 business continuity terms. The accompanying downloadable BCP Tool Kit has 24 planning and analysis tools, including sample plans for evacuation, emergency response, and crisis management; scripts and plot development tools for creating exercises to test and audit plans; analysis tools for fire exposure, service impact, resource requirements, etc. It also includes checklists, case studies, and Web references. In addition to those highlighted above, this book includes additional important features: Ideal for senior undergraduate, MBA, certificate, and corporate training programs. Chapter overviews and conclusions; charts, graphs and checklists throughout Glossy of 90 business continuity terms. Downloadable Business Continuity Tool Kit, including templates of a sample business continuity plan, evacuation plan, emergency response plan, crisis management plan; case studies and exercises; student assignments; Websites; reader self-assessment. Instructor Materials, including PowerPoint slides, Syllabus and Instructor's Manual for 8-week course, with emphasis on student role playing. Author is a business continuity management pioneer and legend

With a pedigree going back over ten years, The Definitive Handbook of Business Continuity Management can rightly claim to be a classic guide to business risk management and contingency planning, with a style that makes it accessible to all business managers. Some of the original underlying principles remain the same – but much has changed. This is reflected in this radically updated third edition, with exciting and helpful new content from new and innovative contributors and new case studies bringing the book right up to the minute. This book combines over 500 years of experience from leading Business Continuity experts of many countries. It is presented in an easy-to-follow format, explaining in detail the core BC activities incorporated in BS 25999, Business Continuity Guidelines, BS 25777 IT Disaster Recovery and other standards and in the body of knowledge common to the key business continuity institutes. Contributors from America, Asia Pacific, Europe, China, India and the Middle East provide a truly global perspective, bringing their own insights and approaches to the subject, sharing best practice from the four corners of the world. We explore and summarize the latest legislation, guidelines and standards impacting BC planning and management and explain their impact. The structured format, with many revealing case studies, examples and checklists, provides a clear roadmap, simplifying and de-mystifying business continuity processes for those new to its disciplines and providing a benchmark of current best practice for those more experienced practitioners. This book makes a massive contribution to the knowledge base of BC and risk management. It is essential reading for all business continuity, risk managers and auditors: none should be without it.

The objective of a business continuity plan is to ensure that your business will be able to continue operating in the event of a disruption in service caused by a natural or man-made incident. This book provides a framework for businesses to assess their general and specific risks, determine measures to counter these risks, and establish a business continuity plan that will work regardless of the type of disruptive event. Written by a leading expert in the field, this text is a must-read for experienced professionals as well as those just starting out.

At this critical point in your Business Continuity Management studies and research, you need one definitive, comprehensive professional textbook that will take you to the next step. In his 4th edition of Business Continuity Management: Global Best Practices, Andrew Hiles gives you a wealth of real-world analysis and advice – based on international standards and grounded in best practices -- a textbook for today, a reference for your entire career. With so much to learn in this changing profession, you don't want to risk missing out on something you’ll need later. Does one of these describe you? Preparing for a Business Continuity Management career, needing step-by-step guidelines, Working in BCM, looking to deepen knowledge and stay current -- and create, update, or test a Business Continuity Plan. Managing in BCM, finance, facilities, emergency preparedness or other field, seeking to know as much as much as possible to make the decisions to keep the company going in the face of a business interruption. Hiles has designed the book for readers on three distinct levels: Initiate, Foundation, and Practitioner. Each chapter ends with an Action Plan, pinpointing the primary message of the chapter and a Business Continuity Road Map, outlining the actions for the reader at that level. NEW in the 4th Edition: Supply chain risk -- extensive chapter with valuable advice on contracting. Standards -- timely information and analysis of global/country-specific standards, with detailed appendices on ISO 22301/22313 and NFPA 1600. New technologies and their impact – mobile computing, cloud computing, bring your own device, Internet of things, and more. Case studies – vivid examples of crises and disruptions and responses to them. Horizon scanning of new risks – and a hint of the future of BCM. Professional certification and training – explores issues so important to your career. Proven techniques to win consensus on BC strategy and planning. BCP testing – advice and suggestions on conducting a successful exercise or test of your plan To assist with learning -- chapter learning objectives, case studies, real-life examples, self-examination and discussion questions, forms, checklists, charts and graphs, glossary, and index. Downloadable resources and tools – hundreds of pages, including project plans, risk analysis forms, BIA spreadsheets, BC plan formats, and more. Instructional Materials -- valuable classroom tools, including Instructor’s Manual, Test Bank, and slides -- available for use by approved adopters in college courses and professional development training.

Julia Graham and David Kaye, two globally recognized risk management experts with experience in 50 countries, were among the first to recognize the interrelationship of Risk Management and Business Continuity and demonstrate how to integrate them with Corporate Governance enterprise-wide. They focus on all the factors that must be considered when developing a comprehensive Business Continuity Plan, especially for multi-location or multinational companies. Endorsed by The Business Continuity Institute, Institute for Risk Management, and Disaster Recovery Institute International, the book includes: • Chapter objectives, summaries and bibliographies; charts, sample forms, checklists throughout. • Plentiful case studies, in boxed text, sourced globally in the UK, US, Europe, Australia, Asia, etc. • Boxed inserts summarizing key concepts. • Glossy of 150 risk management and business continuity terms. • Wide range of challenges, including supply chain disruptions, media and brand attack, product contamination and product recall, bomb threats, chemical and biological threats, etc. • Instructions for designing/executing team exercises with role playing to rehearse scenarios. • Guidance on how to develop a business continuity plan, including a Business Impact Analysis. Downloadable Instructor Materials are available for college and professional developement use, including PowerPoint slides and syllabus for 12-week course with lecture outlines/notes, quizzes, reading assignments, discussion topics, projects "Provides clear guidance, supported with a wide range of memorable and highly relevant case studies, for any risk or business continuity manager to successfully meet the challenges of today and the future." --Steven Mellish, Chairman, The Business Continuity Institute

This book provides the principles for determining the appropriate strategy for each critical business functions. It is use as a guidebook to allow the reader to walk through the entire process using various recovery strategy stages. The book also includes practical how-to-do-it templates to assist persons in developing and selecting their specific business units' and corporate-wide recovery strategy.