CONTENTS
What is business continuity management?
Benefits of effective BCM programs
Emerging risk and threat topologies
Chapter 2: Setting up the BCM Program
Establishing the governance model
Establishing the BCM organizational unit
Organizations with a regional or international presence
Chapter 3: Running the BCM Life Cycle
Running the BCM life cycle for the first time
Strategies and risk treatment plans
ISO22301 societal security – preparedness and continuity management systems – requirements
Chapter 5: Technology Continuity
IT disaster recovery and readiness for business continuity (ITDR and IRBC)
Technology continuity outside IT
Chapter 6: Technology Continuity Standards
Chapter 7: Facilities Management and Physical Security
Physical security preparations
Environmental setups and preparations
Features of an effective evacuation plan
Role of BCM software within the BCM life cycle
Features of effective BCM software
Policy ownership and maintenance
Understanding your processes – general process information
Understanding your processes – internal and external dependencies
Understanding your processes – impacts and criticality
Identifying RTO, season, and RPO
Understanding your processes – IT and resource requirements
Succession planning – identification of human resources
Assets required during disaster – identification of recovery resources
Appendix 4: Risk Assessment Questionnaire
Appendix 5: Risk Assessment Report
Appendix 6: BCM Strategy Report
Key inputs for developing the business continuity strategy
Objectives of the business continuity strategy
Overview of the preferred/recommended business continuity strategy for the organization
Business continuity strategy – crisis management
Business continuity strategy – processes
Business continuity strategy – technology
Business continuity strategy – data and information
Business continuity strategy – supplies
Business continuity strategy – people
Business continuity strategy – facilities and premises
Business continuity strategy – business continuity management
Team leader contact details and responsibilities
Activities to be performed immediately after a disaster
Activities to be performed during disaster recovery
Processes to be performed if IT systems are available
Processes to be performed if IT systems are not available
List of documents/manuals to be stored off site
Activities to be performed immediately after a disaster
Activities to be performed during disaster recovery
List of documents/manuals to be stored off site
Map containing building and assembly point(s)
Employees’ emergency contact information
Appendix 10: Test Plans and Forms