Business Continuity & Risk Management: Getting Started
Where in the Library are BCRM books?
Dewey Decimal Number sections:
- 658 (General management -- Business Continuity)
- 363 (Technology -- Risk assessment )
- 368 (Insurance)
contain books on Business Continuity & Risk Management.
All of these number sections can be found in Ryan Library, 3rd Floor, West Wing. View library map »
First steps for creating a BCRM plan
1. List the major functions or activities of your organization. List the functions of each unit, department or branch.
2. Determine which activities are time-critical business functions. The continued operations of these services or activities are considered critical for the organization.
3. Assign a priority to each of the time-critical activities. Rate each activity from 1 to 5 to show the length of time it can remain disrupted. For example, one day or less is a priority 1, 2-4 days a priority 2, 3-5 days a priority 3, and so on.
4. Develop a planning objective for each activity. A planning objective states your organization’s goal for resuming each activity within a specific timeframe (i.e., restore data center operation in four hours).
5. Determine the minimum needs for initial response. Plan for restoring communication methods, and then consider essential information sources, essential equipment and key internal or external personnel who will be crucial for continuity efforts.
6. Obtain senior management approval of the essential functions, priorities and planning objectives. This allows confirmation of key decisions made during the planning process.
7. Delegate planning assignments to the staff who carry out the essential activities on a daily basis.Personnel who carry out tasks on a daily basis are generally the best qualified to perform recovery and continuity functions.
8. Incorporate fine details into the plan. Focus on the impact of the business interruption, not the cause. Review budget and staffing needs to implement the plan requirements.
9. Consolidate all sections of the plan into a comprehensive business continuity plan for your entire organization. Communicate the plan to all employees. Assemble individual department or branch plans into the overall company plan. Train key employees in their response to plan activation. Inform all employees of the plan.
10. Remember, there is a human cost in a crisis or disaster. How will you help employees restore their emotional and physical health following a crisis or disaster? Identify resources, such as employee assistance programs or community-based resources, to help your workforce cope with the event.
11. Test the plan. Update the plan regularly based on test results and organizational changes. Testing is crucial to determining whether your plan will work as intended in a real disaster or crisis situation.