Business Continuity Planning

(BCP)
How to preserve critical
business functions in the
face of a disaster.
Presented by Mark Joseph G. Gasalao, CRM

What Is Business Continuity?

Business Continuity (BC) is defined as the capability of the organization to continue delivery of products or services at acceptable
predefined levels following a disruptive incident. ( Source: ISO 22301:2012)
Business Continuity Management (BCM) in Simple Terms

Identify Threats to the Organization/Business ( e.g. Earthquake, Storm, Flood, Pandemic)

Identify the Impacts to your business operations that those threats might cause if realized.
Build Resilience to ensure that organization can respond immediately to a major incident.

Business Continuity
Planning & Preparation
Risk Management
Business Continuity is under the umbrella of Risk Management. This is the phase where Risk Related to BC are Identified, Analyzed,
Assessed and Treated. These are the following activities in the Planning and Preparation Stage;
Business Impact Analysis (BIA) - A business impact analysis (BIA) predicts the consequences of disruption and identifies critical business
functions, processes and gathers information needed to develop mitigation and recovery strategies. Potential loss scenarios should be
identified during a risk assessment. Operations may also be interrupted by the failure of a supplier of goods or services or delayed deliveries.
There are many possible scenarios which should be considered.
Business Continuity Plan (BCP) - The BCP is the documentation of the strategy and the detailed processes and activities that will take
place if an event does occur. Includes Testing the Response, Business Continuity and Disaster Recovery plan.

Business Continuity
Disaster Materializes
The 2nd R - Response
Incident/disaster Response covers the activities that occur between the time the warning of an impending incident is received up to
and including macro damage assessment after the incident occurs.
The actions taken in the initial minutes of an disaster are critical. A prompt warning to employees to evacuate, shelter or lockdown can
save lives, not to report for work. A call for help to public emergency services that provides full and accurate information will help the
dispatcher send the right responders and equipment. An employee trained to administer first aid or perform CPR can be lifesaving.
Action by employees with knowledge of building and process systems can help control a leak and minimize damage to the facility and
the environment.
Example of Activities are
Call Tree Activation
Evacuation Plan

Business Continuity
Post Disaster
Disaster Recovery
Involves a set of policies and procedures to enable the recovery or continuation of vital technology infrastructure and systems
following a natural or human-induced disaster. Disaster recovery focuses on the IT or technology systems supporting critical business
functions, as opposed to business continuity, which involves keeping all essential aspects of a business functioning despite significant
disruptive events. Disaster recovery is therefore a subset of business continuity.

Example of Activities are

Activating Back up/DR Site
Ensuring all Critical process are back
online.
Data Protection
Data Recovery

Business Continuity
Post Disaster
Service Restoration
Restoration is the final step in a BCP process. It restores the full capabilities of the business processes at a permanent (or at least
long-term) site. This is where the business 'gets back to normal', and it often involves migrating the business functions from the
recovery site to the Primary Site.