Establish and Review The Business Continuity Management Framework and Strategies

Procedures and Specifications of the Assessment

The learner would need to address the following:

- Identify circumstances, barriers and/or interruptions that will disrupt, damage or inhibit the continuation of critical business functions and explain how these can be minimised
- Describe the organisation's current functionality, including existing data and information systems
- Describe the organisation's internal and external dependencies and interdependencies
- Outline the organisation's policies and procedures relevant to the business continuity management framework, including risk management strategy
- Identify and describe past and current internal, external and industry disruptions
- Explain the relationship of the business continuity management framework to other business processes.

Assessment

1. What are the procedures for monitoring performance of the business continuity management framework?

2. The organization should conduct internal audits at planed intervals so that it may make sure the BCMF conforms to its own requirements for its BCP. Discuss.

3. Why is it important to identify improvements to be made to the business continuity arrangements?

4. What are the circumstances that can cause disruption, damages or inhibit the continuation of critical business functions? Discuss.

5. Describe the organisation's internal and external dependencies and interdependencies outline the organisation's policies and procedures relevant to the business continuity management framework

6. Discuss the need for the organization to have an ongoing programme for business continuity training and awareness.

7. Top management should review the organization's BCMS, at planned intervals, to ensure its continuing suitability, adequacy and effectiveness including the effective operation of its continuity procedures and capabilities.

Such areas include:

Policy
Resource allocation
Risk acceptance
Objectives and targets
Business continuity strategies

8. Continual improvement and BCP maintenance should reflect changes in the activities, functions, and risks tothe operation of the organization that will affect the management system.

Discuss the following:

Top management support is essential
The need to ensure that a revised communication strategy is in place
Understanding risk and vulnerability analysis
Review of Business Impact Analysis
Review and write the recovery steps of the plan
Create a checklist for critical personnel and contact lists
Copy and distribute the revised BCP
Ensure new version of the BCP is updated
Test the BCP and write a recovery plan
Debrief to identify any recommendations or gaps
Consultation to gain feedback on activities and reports
Devise BCP key performance indicators
Activation and deployment of plans