Education & Training : Two Day Courses
BCP-301: Effective Business Impact Analysis
This 2-day course provides a structured, process-oriented methodology for assessing, and mitigating, the potential consequences of interruptions in critical organizational processes.
Audience
This course is designed for executives, managers, business continuity planners and staff who are involved in or manage business continuity functions. It is also highly useful for internal and external auditors, records managers, information technology managers, administrative heads, and others responsible for the effective administration of any size of department, agency or organization.
Duration: 2 day
Objectives
At the conclusion of this course, participants should:
- Have the tools and knowledge required to conduct Risk Assessments and Business Impact Analyses for their organization
- Know how to identify and select cost-effective BCP strategies for critical functions, processes and computer systems
Topics covered include:
1. Risk Assessment:
- Identifying potential technological, environmental, and human threats
- Determining the business processes affected by these threats and assessing the severity of risk to each business process
- Identifying single-points-of-failure and other serious exposures
- Developing strategies for deterring threats and/or reducing risks and determining costs, and cost-justification, for these strategies
- Preparing and presenting a Risk Assessment report
- Implementing and maintaining threat deterrence and risk reduction measures
2. Business Impact Analysis:
- Identifying critical business processes
- Determining impacts of business interruption
- Assessing the time-sensitivity of impacts
- Developing impact mitigation strategies
- Establishing the 'maximum tolerable downtime' of critical processes
- Determining minimum resource requirements for business resumption
- Preparing and presenting a Business Impact Assessment report
- Interview techniques
3. Strategy Development:
- Establishing the 'worst case' scenario, and all 'less than worst case' scenarios, for which strategies need to be developed
- Identifying potential short term contingency strategies, and longer term recovery strategies, for critical business processes
- Determining order-of-magnitude costs and evaluating the relative merits for each strategy
- Selecting the preferred strategies and preparing cost justifications
- Implementing the approved strategies
Outline
1. Risk Assessment and Business Impact Analysis - What threatens your organization?
- Understanding the need for a Business Continuity program
- Overview of the Business Continuity Management lifecycle
- Defining your organization's Business Continuity requirements
- Conducting a Business Continuity Risk Assessment
- Conducting a Business Impact Analysis
2. Identifying and selecting Business Continuity strategies for:
- Mitigating risk
- Reducing impact
- Recovering computer systems
- Resuming business operations
Workshop Deliverables
- Print and Electronic Versions of all Presentation Materials
- Excel Spreadsheets and/or Word tools and templates for Risk Assessments, Business Impact Analysis, and Strategy Evaluations
- Additional tools covering all aspects of Business Continuity Planning