NYS Forum
Essentials of Business Continuity Management
Three day training class
February 2-4, 2010
The NYS Education Building,
Washington Ave. 5th floor,
Room 5 A/B
 
Co-Chairs:
Ken Mason, SED,
David DeMatteo, SEMO,
Mark Spreitzer, CBCP, CGI,
Michael Orozco, TechnoDyne
 

 

Essentials of Business Continuity Management

Course Description:

Essentials of Business Continuity Management is a 3 day course that provides you with knowledge to develop an actionable business continuity program for your organization.

Essentials of Business Continuity Management provides the foundation necessary for new or current professionals interested in either developing a career in Business Continuity Management, seeking certification, or for those professionals responsible for developing a business continuity program for their organization. It is designed to expose the participant to all aspects of a holistic BCM program and to be a solid "how to" guide for building a business continuity program for all types of organizations.

Student activities and case study are included throughout the course and are designed as knowledge checks to reinforce lesson materials and to provide attendees with hands-on activities that will enable them to become familiar with and apply these principles in their jobs. Attendees will gain from hands-on interactive activities designed to assist all professionals in enhancing the visibility and reach of their BCM programs.

 

Course Outline:

Day 1: Understanding Your Organization & Building Strategies to Protect Your Organization

To be able to develop an appropriate BCM program you must first understand your organization and what activities or processes are essential to ensure continuity of business critical activity to at least a minimum level.

BCM must be owned and fully integrated into the organization as an embedded management process. Day 1 takes a close look at the major elements or the cornerstone of developing a business continuity program for your organization. Day 1 also explores the data gathering essentials of conducting a Business Impact Analysis and a Risk Assessment and building strategies to reduce risks to the critical processes and functions.

Day 2: Developing a BCM Response

The aim of the various plan(s) covered in this stage is to identify, as far as possible, the actions that are necessary and the resources which are needed to enable the organization to manage an interruption whatever its cause. Day 2 focuses on plan development identifying the essential components of the Business Continuity Plan that includes Incident Management, Crisis Management & Communications, Information and Communication Technology, and Pandemic preparedness procedures.

Day 3: Developing a BCM Culture & Exercising your BCM Capability

The successful establishment of a Business Continuity Management (BCM) culture within an organization is dependent upon its integration with the organization's strategic, and day-to-day, management and alignment with its business priorities. Day 3 reviews how to develop an organizational awareness and training campaign for your organization. In addition, a business continuity management program is not complete without its having been exercised by its people and maintained to keep it up-to-date and executable. Day 3 explores the testing, exercising, maintaining, and auditing of the plan to ensure a business continuity capability.

 

Course Schedule & Syllabus

Day 1: Understanding the Organization & Building Strategies to Protect the Organization

8:00 - 8:30 AM: Introductions and overview of course

8:30 - 9:00 AM: Open for Business Self-Assessment - Page 2 and Review Open for Business Toolkit and BCI's Good Practice Guidelines

9:00 - 10:30 AM: BCM Program Development

  1. Presentation: BCM Program Development
  2. Activities:
    1. Develop a high level project plan - Identify tasks for each milestone
    2. Review a draft policy statement
    3. Identify members of the Steering Committee / Crisis Management Team including the Executive Sponsor
    4. Discuss budget needs
  3. Discussion Questions: Break up into small groups

10:30 - 10:45 AM: Morning Break

10:45 AM - 12:15 PM: Conducting a Business Impact Analysis

  1. Presentation: The Business Impact Analysis
  2. Activities:
    1. Answer questions 7-9 in Case Study.
    2. Identify BIA participants for your organization and how you will gather the information you need from each participant
  3. Discussion Questions: Break up into small groups

12:15 - 1:00 PM: Lunch Break

1:00 - 2:30 PM: Conducting the Risk Assessment

  1. Presentation: Conducting the Risk Assessment
  2. Activities:
    1. Answer questions 10-11 in the Case Study, discuss page 10.
    2. Identify risks to your organization (template provided)
  3. Discussion Questions: Break up into small groups

2:30 - 2:45 PM: Afternoon Break

2:45 - 5:00 PM: Developing Strategies to Protect the Organization

  1. Presentation: Developing Strategies to Protect the Organization
  2. Activities:
    1. Answer question 12 in the Case Study, discuss page 11 and 14.
    2. Discuss types of strategies that could be "quick fixes" and "low cost"
  3. Discussion Questions: Break up into small groups

Day 2: Developing a BCM Response

8:00 - 9:45 AM: The Business Continuity Plan

  1. Presentation: The Business Continuity Plan
  2. Activities:
    1. Discuss questions 13-14 in the Case Study
    2. Take a look at your organization and determine what types of plans / procedures are currently in place and what plans / procedures need to be improved in order to build a full and complete set of documents and capabilities for your organization.
    3. Identify teams and team leaders with alternates for each type of plan / procedure you are recommending for your organization. Determine the mission of each team.
  3. Discussion Questions: Break up into small groups

9:45 - 10:00 AM Morning Break

10:00 - 11:45 Incident Response and the Crisis Management Plan

  1. Presentation: The Incident Response Plan
  2. Activities:
    1. Discuss pages 13-16 in the Case Study
    2. Complete the Emergency Response Scorecard
    3. Determine who should be responsible for the following:
      1. Activation of the BC plan
      2. Activation of the EOC
      3. Activation of Command Centers
  3. Discussion Questions: Break up into small groups

11:45 - 12:30 PM Lunch Break

12:30 - 2:00 PM: ICT Continuity Management / IT Disaster Recovery Plan

  1. Presentation: ICT Continuity Management / IT Disaster Recovery Plan
  2. Activity: Looking at the teams you developed and the mission of each team, develop some tasks that each team is responsible for.
  3. Discussion Questions: Break up into small groups

2:00 - 2:15 PM Afternoon Break

2:15 - 4:00 The Pandemic Plan

  1. Presentation: The Pandemic Plan
  2. Discussion Questions: Break up into small groups

Day 3: Embedding BCM into the Culture of your Organization and Exercising your BCM Capability

8:00 - 9:45 AM: Embedding BCM in the Organization's Culture

  1. Presentation: Embedding BCM in the Organization's Culture
  2. Activities: See page 19 and question 15 in Case Study
  3. Discussion Questions: Break up into small groups

9:45 - 10:00 Morning Break

10:00 - 11:30 AM Exercising your BCM Capability

  1. Presentation: Plan Testing, Exercising & Auditing
  2. Activities:
    1. Develop training goals and objectives for one identified audience
    2. Develop a slogan to reach your target audience
    3. Identify at least awareness and training activities and assign who is responsible for each activity
    4. See page 20 and question 16 on Case Study
  3. Discussion Questions: Break up into small groups

11:30 - 12:15: Lunch Break

12:15 - 1:45 PM: Maintaining & Auditing the Plan

  1. Presentation: Maintaining and Auditing the Plan
  2. Activity: See page 17 in Case Study
  3. Discussion Questions: Break up into small groups

2:00 - 2:15 Afternoon Break

2:15 - 4:30 PM: Exercise

We thought we could conduct a short table top exercise so that they can see how to implement the methodology of running an exercise. We would appreciate any scenario ideas that would support the government agency response.

4:30 - 5:00 Evaluation and Wrap Up

 

Time & Place:

  • February 2-4, 2010
  • 8:00 am to 5:00 pm
  • The NYS Education Building, Washington Ave. 5th floor, Room 5 A/B, Albany NY