Develop a Business Continuity Plan

Streamline the traditional approach to make BCP development manageable and repeatable.

Onsite Workshop

Ineffective business continuity planning leads to:

  • Regulators and customers demanding a functional BCP.
  • Progress is limited or stalled – no effective approach to make this a manageable project that can actually be completed.
  • No clear sense of appropriate recovery objectives or how to get there.

This workshop enables you to:

  • Identify business processes and dependencies, as well as interim processes.
  • Define an appropriate (desired) recovery timeline based on a business impact analysis.
  • Create a step-by-step incident response plan to minimize business disruption.

Module 1: (Pre-Workshop) Prepare for the BCP Workshop

The Purpose

  • Prioritize business units for BCP development.
  • Create a BCP pilot team.
  • Define BCP metrics.

Key Benefits Achieved

  • Select the pilot business unit and workshop participants.
  • Establish metrics to measure the benefits of completing the BCP pilot.

Activities: Outputs:
1.1 Determine the business units that are most in need of a BCP.
  • Prioritized list of business units for BCP.
1.2 Select the pilot business unit to follow the BCP methodology.
  • Seed success by identifying a good candidate for initiating BCP development.
1.3 Define roles for the BCP pilot.
  • BCP pilot team identified.

Module 2: Identify Business Processes and Dependencies

The Purpose

  • Determine process workflows.
  • Identify existing alternatives/interim processes.
  • Assess existing business continuity plans.

Key Benefits Achieved

  • Document your core business processes and dependencies.
  • Document existing alternatives/interim processes.
  • Determine your current BCP status (to enable the team to measure progress).

Activities: Outputs:
2.1 Identify business process workflows and dependencies.
  • Documented list of core business processes and dependencies.
2.2 Determine existing contingency planning.
  • Documented list of existing alternatives/interim processes.
2.3 Assess existing business continuity plans.
  • Baseline BCP status.

Module 3: Determine the Desired/Target Recovery Timeline

The Purpose

  • Define a scoring scale to measure impact.
  • Estimate the impact of downtime for each business process.
  • Determine the desired RTOs/RPOs.

Key Benefits Achieved

  • Define a scoring scale to estimate business impact.
  • Conduct a business impact analysis.
  • Define recovery time and recovery point objectives (RTO/RPO).

Activities: Outputs:
3.1 Simplify estimating business impact.
  • Business impact analysis (BIA) scoring criteria defined.
3.2 Determine business process criticality to prioritize BCP efforts.
  • Business impact analysis.
3.3 Determine an appropriate recovery timeline based on business impact.
  • Desired recovery timeline identified.

Module 4: Determine the Current Achievable Recovery Timeline

The Purpose

  • Determine your baseline business continuity capability (your current state). 

Key Benefits Achieved

  • Identify the gaps between current and desired business continuity capability. 

Activities: Outputs:
4.1 Identify current capabilities via tabletop planning.
  • Current state incident response plan defined.
4.2 Compare current to desired RTOs/RPOs.
  • RTO/RPO gaps defined.
4.3 Estimate likelihood and impact of failure of individual dependencies.
  • Additional vulnerabilities identified.

Module 5: Identify Projects to Close Gaps and Mitigate Risks

The Purpose

  • Determine what projects or initiatives are required to close the gap between current and desired business continuity capability.

Key Benefits Achieved

  • BCP project roadmap defined.

Activities: Outputs:
5.1 Identify projects that close recovery gaps.
  • Potential list of business continuity projects identified.
5.2 Prioritize projects based on cost and benefits.
  • Order of project implementation identified.
5.3 Create a project implementation timeline.
  • Project schedule identified.

Module 6: Document and Validate the Desired-State Incident Response Plan

The Purpose

  • Define and validate the desired incident response plan.
  • Document your incident response plans for the current and desired state.
  • Conclude the onsite workshop.

Key Benefits Achieved

  • Document your incident response plans for your current state (i.e. based on current capabilities) as well as your desired state (i.e. after BC projects are implemented that would enable you to meet desired RTOs/RPOs).
  • Ensure the BC project roadmap will achieve the desired goals (meet desired RTOs/RPOs).
  • Create a pilot summary presentation deck to communicate results to your executive team.

Activities: Outputs:
6.1 Determine what the incident response plan would be after the BC project roadmap is completed and ensure it achieves the desired RTOs/RPOs.
  • Desired-state incident response plan defined.
  • Updated BC project roadmap, if the desired-state planning process uncovers additional gaps.
6.2 Enable incident response coordinators to monitor and report status during an incident.
  • Incident response plan for the current and desired state.
6.3 Summarize pilot outcomes including BC metrics improvements.
  • Pilot results presentation PowerPoint deck.

Module 7: (Post-Workshop) Create a Plan for BCP Completion and BCP/DRP Alignment

The Purpose

  • Create a BC policy and BC management teams.
  • Define a workflow to develop a BCP for remaining business units.
  • Define a workflow for incorporating BCP outcomes into your IT DRP process.

Key Benefits Achieved

  • Create a BC policy to drive ongoing business continuity management.
  • Define a workflow to develop a BCP for remaining business units.
  • Define a workflow for incorporating BCP outcomes into your IT DRP process.

Activities: Outputs:
7.1 Establish corporate goals for ongoing business continuity management.
  • BC policy.
7.2 Enable the organization to repeat the BCP methodology for remaining business units, summarize results, and resolve discrepancies.
  • Documented workflow for completing BCP for remaining business units.
7.3 Update your IT DRP to meet new technology requirements defined by the BCP process.
  • Documented workflow for incorporating BCP outcomes into your IT DRP process.
7.4 Ensure ongoing alignment between your IT DRP and BCP.

Workshop icon Book Your Workshop

Onsite Workshops offer an easy way to accelerate your project. If you are unable to do the project yourself, and a Guided Implementation isn’t enough, we offer low-cost onsite delivery of our Project Workshops. We take you through every phase of your project and ensure that you have a road map in place to complete your project successfully.

Book a Workshop View Blueprint
GET HELP Contact Us
×
VL Methodology