1. Copyright © 2007 EDWARD DEVLIN, Crisis Management By: Dr. Sara Jeza Alotaibi www.drsara.co.uk 1 Chapter 2 Business Continuity Planning: What Is It?

2. Copyright © 2007 EDWARD DEVLIN, Crisis Management Chapter 2 Outline 2.1 Introduction 2.2 The Prevention Element 2.3 The Emergency Response Plan 2.4 The Business Resumption Plan

3. Copyright © 2007 EDWARD DEVLIN, Crisis Management Business Continuity Plan Prevention Plans Emergency Response Plans Business Resumption Plans BeforeDuringAfter Risk Management Incident Response Crisis Mang. Plan Facility PlansLife safety Business Units’ Plan Security Plans Damage Assessment IT Dept. Plan

4. Copyright © 2007 EDWARD DEVLIN, Crisis Management 2.4 The Business Resumption Plan The third of the three elements of the Business Continuity Plan is the Business Resumption Plan. The Business Resumption Plan consists of policies and procedures employed to assist employees in resuming business operations after an interruption caused by a disaster or crisis. It is composed of three types of plans: 1.The Information Technology Disaster Recovery Plan. 2.The Business Unit — Business Resumption Plan (BRP). 3.The Crisis Management Plan.

5. Copyright © 2007 EDWARD DEVLIN, Crisis Management 1) The Information Technology-Disaster Recovery Plan The IT Disaster Recovery Plan consists of procedures that will enable IT employees to respond swiftly and effectively to minimize business interruption and financial loss.

6. Copyright © 2007 EDWARD DEVLIN, Crisis Management 2) The Business Unit’s Business Resumption Plan The Business Unit’s Business Resumption Plan details how each business unit, or department, within the organization will resume operations following an interruption.

7. Copyright © 2007 EDWARD DEVLIN, Crisis Management 3) The Crisis Management Plan The Crisis Management Plan consists of responsibilities for the executives of organizations to follow when a disaster, or a nonphysical crisis, has struck the organization. The Crisis Management Team will employ the following steps to contain the crisis: 1. Take charge quickly. 2. Determine the facts. 3. Tell your story. 4. Fix the problem.

8. Copyright © 2007 EDWARD DEVLIN, Crisis Management Differences between the Crisis Management Plan and the Business Resumption Plan In a Crisis Management Plan, if a crisis strikes the company, the crisis management team will activate and manage the crisis until its conclusion. In a Business Resumption Plan, if a disaster strikes a computer center, causing injuries to employees, or damage to the equipment or to the building, the IS/IT department would need support.

9. Copyright © 2007 EDWARD DEVLIN, Crisis Management Any Questions? 9 S.Alotaibi @ 2014 www.drsara.co.uk