Common Business Areasstepbystep by 01dGd1AR

VIEWS: 5 PAGES: 3

									    DCMS Business Continuity Planning for Sponsored Bodies in Same Business
               Environments as Others - Step by Step Approach

Introduction

If your organisation is in a similar business environment as others, e.g.
museums and libraries, then there may well be opportunities for working
together on business continuity planning, with mutual benefit in terms of
resource and cost savings and having reciprocal arrangements, e.g. for spare
accommodation. Being in similar business environments, it could be possible
for some (maybe significant) parts of the ‘establishing business recovery
priorities and timescales (including business impact analysis review)’ stage to
be accomplished together – as one exercise covering several bodies.

Following on from this, elements of business continuity strategy could well be
similar, with options for mutual and reciprocal working. There may be common
elements of business continuity plans, and mutual peer review could take
place during business continuity plan testing. The following sections provide
thoughts on how you may work together at each business continuity planning
stage.

Establishing Business Recovery Priorities and Timescales (including
Business Impact Analysis Review

The objective here will be to conduct a ‘consolidated’ business impact review,
business recovery priority and timescale identification activity, and
identification of an initial draft of common risk reduction controls. Suggested
steps to follow in working together for this stage are as follows.

Having identified the other sponsored bodies in business environments similar
to yours willing to work together, a meeting should be held of the persons
from each body with business continuity responsibilities. The meeting should
confirm the common business functions, select representative senior business
managers to be issued with the introductory letter and business impact
analysis and business recovery requirements forms, and agree who will issue
the letters and forms (initially only the business impact analysis forms).

Then once the business impact analysis forms have been completed and
received, a workshop should be held to review the results and identify any
clarifications required, and also agree who will issue the business recovery
requirements forms. Once the business impact analysis results have been
agreed, another meeting should be held to confirm the approach and
responsibilities for dealing with the business recovery requirements to cover
all common key business functions, documenting the common requirements
(and maybe handle anomalies), and identifying possible risk reduction
controls. In parallel with this the business recovery requirements forms should
be issued to the selected senior business managers.

Then once the forms have been completed and received, a workshop should
be held to review the results, identify any clarifications required and agree the
content for the core report, and the initial draft document on risk reduction
controls. Each attendee will then have to adjust the core report and the draft
risk reduction controls document as necessary for his/her organisation, and


December 2005                                                          Page 1 of 3
    DCMS Business Continuity Planning for Sponsored Bodies in Same Business
               Environments as Others - Step by Step Approach

obtain formal senior management (‘Board level’) sign-off for the business
recovery requirements report.

Business Continuity Strategy Formulation

The objective here is to identify common business continuity strategy
elements A workshop should be held to review the agreed business recovery
requirements, and the current draft of the risk reduction controls document,
and, using the list of possible options in the Step by Step Approach guide and
the form on AGORA, discuss common strategy options, assessing the
advantages, disadvantages and viability and agree draft recommendations on
the most cost effective and viable common options, and also consider
common, mutual, and reciprocal logistical elements, etc., and possible
common business continuity plan elements.

Attendees should then go away and consider the workshop output in their
own context and add any aspects peculiar to their organisation. Then another
workshop should be held to finalise common/mutual/reciprocal strategy option
recommendations (including on risk reduction controls and any common
implementation plan for risk reduction controls and business continuity plan
supporting measures and preparatory actions), and common business
continuity plan elements.

Further, responsibilities should be agreed for such as drafting common
elements of the business continuity strategy report (the core report), the
common implementation plan, and (for later) common business continuity
plan elements and reciprocal arrangements for completed draft business
continuity plan review. Then, as necessary, each attendee will have to adjust
the core report, and common implementation plan, for his/her organisation,
and obtain formal senior management (‘Board level’) sign-off.

Business Continuity Plan Production

The objective here is to work together in producing common business
continuity plan elements (as agreed at the previous workshop) and to act in
‘peer review’ mode of business continuity plans produced. Once each
organisation’s business continuity plan has been drafted, it should be
reviewed by the agreed reciprocal arrangement in line with the relevant
content of the Step by Step Approach guide, and related AGORA material.

Business Continuity Plan Testing

The objectives here are to identify and document any common testing
elements, act in supporting ‘peer review’ mode for testing strategies and plans
produced, and act as independent referee in testing of another’s plan. A
workshop should be held to discuss and agree any common testing elements,
and who will work with whom on:

      documenting common testing strategy and plan elements,
      testing common elements, and recording results,


December 2005                                                        Page 2 of 3
    DCMS Business Continuity Planning for Sponsored Bodies in Same Business
               Environments as Others - Step by Step Approach

      reviewing another’s completed testing strategy and plans,
      refereeing/monitoring testing of another’s plans.

Business Continuity Awareness for All Staff

The objective here is to consider the possibilities of common business
continuity planning awareness material and briefings for staff. A workshop
should be held to discuss and agree on common awareness programme
elements, and who will work with whom on producing material for and
delivering common business continuity planning awareness briefings for staff,
and related ‘reminders’ (documents, ‘cards’, whatever) for staff retention. The
workshop could be combined with the workshop for business continuity plan
testing – see above.

Ongoing Business Continuity Plan Maintenance

As changes occur over time, all persons with business continuity responsibility
in the sponsored bodies with common business environments should keep in
touch, and hold a meeting or workshop as appropriate to review changes that
could relate to common elements and agree whether any adjustments will
need to be made to the common elements of recovery requirements, strategy
and/or plan, and who should deal with them and possible subsequent re-
testing. In any event, it would be sensible to meet periodically to review
current status, etc.




December 2005                                                         Page 3 of 3

								
To top