CBCP业务连续性管理专家培训材料_Area1.ppt

CBCP业务连续性管理专家,1,Business Continuity ManagementCourse for Advanced Professionals Introduction,CBCP业务连续性管理专家,2,Subject Area 1：Project Initiation&Management,CBCP业务连续性管理专家,3,Lesson Overview,BCM Program DevelopmentRoles&ResponsibilitiesTerms&DefinitionsManaging ProjectsManaging ChangesPresenting to Senior Management,CBCP业务连续性管理专家,4,Professional Practices for Business Continuity Professionals,Project Initiation and ManagementRisk Evaluation and ControlBusiness Impact AnalysisDeveloping Business Continuity StrategiesEmergency Response and OperationsDeveloping and Implementing Business Continuity Plans Awareness and Training ProgramsMaintaining and Exercising Business Continuity PlansCrisis CommunicationsCoordination with External Agencies,CBCP业务连续性管理专家,5,Objectives,Establish the need for Business Continuity Planning(BCP)within a Business Continuity Management(BCM)Process,including resilience strategies,recovery objectives,business continuity and crisis management plans,and including obtaining management support,and organizing and managing the project to initiate the process to completion within agreed upon time and budget limits.,CBCP业务连续性管理专家,6,The Professionals Role(1/2),Lead Sponsors in Defining Objectives,Policies,and Critical Success FactorsScope and objectivesLegal and requirements reasonsCase histories and industry best practicesCoordinate and Organize/Manage the BCP Project and Overall BCP Process using a steering committee and project task forceOversee the BCP Process Through Effective Control Methods and Change Management,CBCP业务连续性管理专家,7,The Professionals Role(2/2),Present the Process to Management and StaffDevelop Project Plan and Budget to initiate the processDefine and Recommend Process Structure and ManagementManage the Project to Develop and Implement the BCP Process,CBCP业务连续性管理专家,8,Terms&Definitions-Business Continuity Management,Business continuity managementThe management of recovery or continuity in the event of a disaster.Also the management of the overall program through training,rehearsals,and reviews,to ensure the plan stays current and up to date.Business continuity(planning)Process of developing advance arrangements and procedures that enable an organization to respond to an event in such a manner that critical business functions continue with planned levels of interruption or essential change.SIMILAR TERMS:Contingency Planning,Disaster Recovery Planning.,CBCP业务连续性管理专家,9,Terms&Definitions-Disaster Recovery Planning,Disaster:A sudden,unplanned calamitous event causing great damage or loss.1)Any event that creates an inability on an organizations part to provide critical business functions for some predetermined period of time.2)In the business environment,any event that creates an inability on an organizations part to provide the critical business functions for some predetermined period of time.3)The period when company management decides to divert from normal production responses and exercises its disaster recovery plan.Typically signifies the beginning of a move from a primary to an alternate location.SIMILAR TERMS:Business Interruption;Outage;Catastrophe.,CBCP业务连续性管理专家,10,Terms&Definitions-Disaster Recovery Planning,Disaster Recovery:Activities and programs designed to return the entity to an acceptable condition.1)The ability to respond to an interruption in services by implementing a disaster recovery plan to restore an organizations critical business functions.Disaster Recovery Plan:The document that defines the resources,actions,tasks and data required to manage the business recovery process in the event of a business interruption.The plan is designed to assist in restoring the business process within the stated disaster recovery goals,CBCP业务连续性管理专家,11,Terms&Definitions-Critical,Critical Functions:Business activities or information that could not be interrupted or unavailable for several business days without significantly jeopardizing operation of the organization.Critical Infrastructure:Systems whose incapacity or destruction would have a debilitating impact on the economic security of an organization,community,nation,etcCritical Records:Records or documents that,if damaged or destroyed,would cause considerable inconvenience and/or require replacement or recreation at considerable expense.,CBCP业务连续性管理专家,12,Terms&Definitions-Critical/Vital Records,Vital Record:A record that must be preserved and available for retrieval if needed.Data and information required to support a business function(i.e.,historical,regulatory requirements)Should be maintained off site at third-party vendor and be available!,CBCP业务连续性管理专家,13,The BCM Planning Process,Risk Assessment&Analysis,Business Impact Analysis,Developing strategies,Plan Development,Awareness&Training,BCM Plan,Maintenance&Updating,ProjectPlanning,Testing&Exercising,CBCP业务连续性管理专家,14,The Planning Process,ObjectiveDefine and organize the project planning parameters and identify the resources needed to develop the BCM PlanSome key tasksExamine and justify the need for BCM to managementOutline the main steps to plan for and recover from a disasterOutline the main steps to derive the BCM PlanSome key deliverables Planning team structure A BCM proposal to management A BCM RFP Project milestones Steering Committee,CBCP业务连续性管理专家,15,Working Knowledge,Establish the Need for Business ContinuityCommunicate the Need for a BCPInvolve Executive Management in the BCP processEstablish a Planning/Steering CommitteeDevelop Budget RequirementsIdentify Planning Team(s)&ResponsibilitiesDevelop&Coordinate Project Action Plans to develop&implement the BCP processDevelop the Ongoing Management and Documentation Requirements for the BCP ProcessReport to Senior Management and Obtain Senior Management Approval/Commitment,CBCP业务连续性管理专家,16,Structuring the BCM Program,Creating the projectDefining tasks,duration,dependencies and resourcesManaging the projectTracking and adjusting for changes until the project is completeDevelop awareness by means of formal reportsPresentations to managementAdjustments to meet management directionKeep communication,gain organizational commitment to the BCP process,CBCP业务连续性管理专家,17,Establish the Need for BC,Requirements&RestrictionsLegalRegulatory(industry trade bodies or associations)StatutoryContractualCurrent recommendations of relevant authoritiesOrganizational policyIdentify Conflicts Organizational policies vs.relevant external requirement,CBCP业务连续性管理专家,18,Legal&Regulatory Requirements,Sarbanes-OxleyTurnbull Act:UK and IrelandNFPA 1600Banking regulations(BC-177)Graham Leach Bliley ActPrudent Man ActHealth Insurance Portability&Accountability Act HIPAA(1996)Basel II Capital Accord,CBCP业务连续性管理专家,19,The Planners Role(1/3),Lead sponsors in defining:Scope&objectives Policies Project assumptions Critical success factors Considering entire organization in initial scope Meeting objectives Confirming assumptions Peer benchmarking-case histories,CBCP业务连续性管理专家,20,The Planners Role(2/3),Ensure all program components are presentEnsure that adequate planning,preparation and training are accomplished for specific areasEnsure adequate teams are designatedIdentify and document program shortcomingsEnsure program is appropriately budgetedManage and organize data gathering effort,CBCP业务连续性管理专家,21,The Planners Role(3/3),Obtain management supportOrganize and manage project Define project objectives Assess project risk Plan project in detailTrack and report project progressManage change,CBCP业务连续性管理专家,22,BCM Program Development,Develop BCM project planSteering CommitteeProject task force Identify planning team(s)and responsibilities Select appropriate personnel Definition of termsDevelop a suitable set of objectives for the BCP process,CBCP业务连续性管理专家,23,Role of Executive Management,Protect and preserve organizations assets and resourcesAssign key functional personnel to carry out recoveryCommitment to the process,CBCP业务连续性管理专家,24,Role of the BCM Steering Committee,The Decision-Making/Guidance Group Provides resources to get project started People Money Specialized consulting resources as requiredDetermines project scope and timeframeProvides support for BC projectDevelops project planDefines roles and responsibilitiesBC planner should be a part of this group,CBCP业务连续性管理专家,25,Identify Planning Teams R&R,Develop team organization and structureUtilize the expertise of team membersDefine team objectivesTeam must internalize the plan and instill a sense of ownershipLong-term benefit of team approachEnsures knowledgeable personnel are available to do assigned critical tasks,CBCP业务连续性管理专家,26,Suggested Teams,Planning/Mitigation/Reduction BCM Steering Committee(Crisis Management Team)Business Continuity Development TeamResponse Emergency Response Team Damage Assessment Team Functional Response Team(s)Crisis Communication TeamRecovery Functional Recovery Team(s)Associated Support Teams,CBCP业务连续性管理专家,27,Building Winning Teams,Key of project management success Choose right people&equipment Encourage and manage effectivelyRecruit most qualified people Dont take a body to fill a positionInvolve first-level management in project They will involve their staffTeam leader should have management experience with that business unit,CBCP业务连续性管理专家,28,The Purpose of Project Management,To provide an understanding of how to establish the need and obtain management support for a Business Continuity Management(BCM)Program in your organization and to organize and manage the program.,CBCP业务连续性管理专家,29,Define Project Objectives,State problemSet clear,concise goals and objectivesEstablish what is in and out of scopeDefine assumptionsDevelop an initial key disaster scenario to focus project activities“Worst case”scenario,CBCP业务连续性管理专家,30,Organize Project,Obtain necessary resources-commitment from senior management Develop Budget RequirementEstablish project organization Steering Committee Obtain team leader/member buy-in to initial work plans Orient and lead team members Establish reporting procedures Arrange for facilities,supplies and support Identify project management software tool(s),CBCP业务连续性管理专家,31,Assess Project Risk,Validate management expectationsAssess feasibility of initial schedules,estimates and resource needs against goalsEvaluate initial work plansAssess project risk vs.justification,CBCP业务连续性管理专家,32,Track and Report Progress(1/3),Monitor and document task completionsValidate completion times and resource consumptionValidate work plan is easy to useInvolve team personnel in developing and adjusting scope,estimates,and schedules,CBCP业务连续性管理专家,33,Track and Report Progress(2/3),Develop work-around plans as neededAssign additional approved resources as neededMaintain lessons learned database for referenceReport status in three directions Up to management Laterally to clients,customers,and users,as well as to other programs or projects Down to project members and team members,CBCP业务连续性管理专家,34,Track an Report Progress(3/3),Conduct project reviews and obtain supporting independent project analysis AuditsConduct steering committee meetings,CBCP业务连续性管理专家,35,Change Management(1/3),Managing change and discovery is a key success factor for an ongoing program What constitutes a change in scope?Who documents and prepares this for review?Who has the approval authority?Report changes in project timeline to senior management,CBCP业务连续性管理专家,36,Change Management(2/3),Obtain(re-)direction and/or instructions from management,steering committee,users and update plan accordinglyReview revised time and resource estimates with project teams and membersValidate capability of project teams and members to accomplish revised goals,timelines,and/or resource objectives,CBCP业务连续性管理专家,37,Change Management(3/3),Re-schedule revised project,using project planning software toolRecord results of re-direction or new instructionsKeep project within scope and budget,CBCP业务连续性管理专家,38,Presenting to Senior Management-Key elements/Tasks,Establish the need for BCMCommunicate that needInvolve executive management in the BCP Establish steering committee Set up reporting structure/status reports,CBCP业务连续性管理专家,39,Presenting to Senior Management-What BC Planner can get,Convey importance of planning effortAnticipate resource requirementsDefine expected results of effortProject the value of resultsDescribe the implications of not proceeding with program,CBCP业务连续性管理专家,40,Presenting to Senior Management-Sell harder,Industry standards&benchmarking What is the“competition”doing?Formal reports&presentationsBenefits of BCMBest practices,CBCP业务连续性管理专家,41,Presenting to Senior Management-Presentation of Findings,MethodologyData groupingsAction itemsNext steps,CBCP业务连续性管理专家,42,Presenting to Senior Management-Involve Executive Management in the process,Explain executive managements roleRelate to organizational mission,objectives,operationsDevelop mission statement/charter/policy for the BCM programExplain and communicate managements accountability and liabilityExplain the impact of risks to which the organization is vulnerable,CBCP业务连续性管理专家,43,Presenting to Senior Management-Reporting,Develop regular status reports for executive sponsorConcisePertinentAccurateTimely information on key parameters of interest/mustDefine the approval chain Defining the approval chain is critical to your success,CBCP业务连续性管理专家,44,Summary,Asset protectionEmployeesInformationPhysical locationStructured,viable plan of action to reduce exposure to lossTo address critical operationsTo meet legal and regulatory requirementsIn the BCM program,the planner is responsible for managing multiple interdependent projects and keeping senior management informed throughout the process,CBCP业务连续性管理专家,45,Sample Questions,