Assistance with Writing Your BCP

1
Assistance with Writing Your BCP

• Two documents
• 1 - Model Process for Developing a Business
  Continuity Plan
• 2 Business Continuity Plan Example

2
We Recommend You Start With Some Assumptions

• Page 2
• Assume that your entire facility has been lost
• Assume that there has not been catastrophic loss
  of life
• Focus on your own facility only do not try to
  plan for disruptions beyond your own agency or
  facility

3
Getting started

• Page 4
• Designate two teams
• BCP Coordination Team to oversee the writing of
  the plan
• BCP Response Team to respond once an incident
  occurs

4
Complete the Critical Business Functions Worksheet

• Page 5
• Most agencies have already completed this step
• However, you may want to edit your original
  functions
• Focus on just a few functions
• Recommend mapping these processes of the functions

5
Complete the Business Impact Analysis Process

• Page 6
• Answer questions about the processes involved in
  carrying out the critical business functions
• Involve other staff dont try to answer these
  questions by yourself
• This step involves time and effort

6
Write the Recovery Steps

• Page 8
• Answer the questions in Form C
• Dont write a separate plan for different types
  of loss (flooding, earthquake, etc)
• Instead, focus on an all hazards approach and
  write a plan assuming that you have lost your
  entire facility
• Can write a separate plan for different
  functions, locations, divisions

7
Prepare Checklists and Phone Lists

• Page 12
• Prepare to do checklists for staff to have
• Prepare call tree for all staff, as well as
  emergency contact information for critical
  personnel

8
Distribute the Final Plan

• Page 13
• Distribute copies of the entire plan to critical
  personnel
• Review and revise the plan
• Whenever major program or technological changes
  occur within your agency
• At least once a year

9
Two Additional Elements

• Test or exercise your plan
• Write a Disaster Recovery Plan describing how you
  will recover the applications necessary to
  restore the critical business functions

10
Final Two Pieces in the Guidance Document

• Map of a critical business function process
• (Example from Revenue)
• Completed Business Impact Analysis
• (Example from Oregon Youth Authority)

11
Business Continuity Plan Example

• This provides an outline to use
• You may choose to lift much of the language and
  use it directly

12
Creating Lists that Identify Staff

• Page 5
• DAS recommendation concerning security of
  personal information
• Provide only position title and work phone number
  in document itself
• Provide individual names and additional contact
  information separately (Page 27)

13
Writing the Communications Plan

• Page 8
• Identify lead staff person responsible for
  contacting each audience
• Describe the steps to take in contacting
  different audiences
• Describe agencys responsibilities under states
  Emergency Management Plan (Page 12)

14
List Details of Critical Business functions

• Provide summary of information gathered during
  the Business Impact Analysis process
• This includes details on the business processes,
  dependencies, vital records, etc.

15
Writing the Recovery Plan

• Page 17
• Focus on loss of entire facility
• Can certainly separate plans if you choose, and
  write separate plan sections for loss of
  structure, loss of power, and loss of IT/network
• Recommend not writing plan section for loss of
  workforce at this time

16
Describe Recovery Steps

• Page 20
• Provide quick summary first
• Then list the details of the steps, including
  staff responsible for each
• Can review this list during an event and
  determine exactly which steps to take at that time

17
Appendices

• A Disaster Impact Assessment
• B Alternate Site Request Form

18
Thats It!

• Questions?
• Comments?