Here\'s background information on Business Risk & Management\'s business continuity program

1. Business Continuity/Crisis Management/Disaster Recovery
Planning / Training / Testing
Prepared by: Date: 31 Oct 2011
Andrew Styles
Managing Director

2. Business Risk & Management Pte Ltd
(BRM)
We provide an effective services in the
following areas:
 Developing and implementing business
continuity and crisis management plans
 Review of your current plans to identify
Number 1… gaps to improve effectiveness
 BRM are the premier Thailand-based business  Crisis management team & staff training
continuity and crisis management service  Business continuity testing
provider
We know Thailand!  IT systems disaster recovery plans
 …the risks associated with operating in the
country and the most effective way to reduce
Contact…
these risks
Andrew Styles
Cost sensitive $$$
 We don’t believe that business continuity should Business Risk & Management Pte Ltd
be expensive so we price accordingly. No +66 818935329
budget is too small and no project is too big. andrew.styles@b-r-m.biz
Asia Reach www.b-r-m.biz
 We also provide business continuity services
across all of Asia
Confidential 2

3. What is business continuity
“Plan for what is difficult.” Sun Tzu
 Focus of business continuity…to minimise
disruption
 Definitions…
 The ability to maintain operations/services in the face of a
disruptive event. www.staffordshireprepared.gov.uk/glossary/
 Business continuity is the activity performed by an
organization to ensure that critical business functions will be
available to customers, suppliers, regulators, and other
entities that must have access to those functions.
en.wikipedia.org/wiki/Business_continuity
Confidential 3

4. Why consider business continuity
 Events are constantly occurring
 These unplanned events can have catastrophic
effects on businesses
 Research shows that companies that don't have
contingency plans in place are more likely to
fail…
 80% of businesses affected by a major incident either never
re-open or close within 18 months (Source, AXA)
 Companies that aren't able to resume operations within ten
days (of a disaster hit) are not likely to survive. (Strategic
Research Institute)
 Research by IBM (Varcoe,1993) showed that 80 per cent of
organisations without relevant disaster recovery plans who
suffered a critical computer disaster went bankrupt
 Within two years after Hurricane Andrew struck in 1992, 80
percent of the affected companies that lacked a business
continuity plan failed (FEMA)
“It can take 20 years to build a business
and 15 minutes to destroy it” Warren Buffet 4
Confidential

5. Benefits
Putting business continuity plans in your organization can prepare your business for any potential
disaster, help ensure that you will be able to maintain continuity of your business
practices, reduce or even possibly remove such calamities could have on your organisation
In addition, business continuity planning will…
 reduce your costs when hit by a crisis
 make your organization more robust. It can strengthen your organisation against problems
 help protect your organisation's image, brand, and reputation
 assist in your insurance company viewing you more favourably should some sort of disaster require their involvement
 offer management a better understanding of their business and ultimately helps identify ways to strengthen any short comings
 show your investors that you take business seriously
 Instil customer confidence in your business
5
Recent flooding in Thailand – Honda Car Factory

6. Reluctance to implement business continuity
 Some companies view business continuity as
being about preparing for something that may
never happen – they’ll deal with crises if they
occur.
 Companies that don’t assess risks leave
themselves vulnerable to events occurring
that they could have identified and stopped
 Consider these examples and not having any
plans in place…
 Example 1: A single employee having
all the knowledge in one area of the
business and that person leaves the
organisation suddenly
 Example 2: Large fire destroys
company’s office building – not having
back of critical data, alternative sites
 Example 3: A product being sent to a
customer is stolen and a replacement
is not immediately available
Confidential 6

7. Crisis Management
 Crisis management is a subset of business continuity
 Crisis management is the process by which an organisation deals
with a major event that threatens to harm the organization, its
stakeholders, or the general public
http://en.wikipedia.org/wiki/Crisis_management
“There are risks and
costs to a programme of
action...but they are far
less than the long
ranging costs of
comfortable inaction.”
John F Kennedy
Confidential 7

8. Why have crisis management plans?
"The most serious failure of leadership is the failure to
foresee“ Robert Greenleaf
 Provides a framework for management to respond
to a crisis
 When people are under extreme pressure they
become less effective and are less likely to think
straight and logically - same applies to
organisations – the ability to come up with logical
processes for dealing with issues and developing
solutions may be more difficult during the crisis
 Developing the crisis management program and
having it ready to be implemented before a crisis
occurs is more effective
 The crisis mgmt plan would include
 roles/responsibilities of staff,
 crisis team processes and templates to follow,
 escalation rules
Confidential 8

9. Phases of a Crisis
Business incident
response is
made up of 3
phases
Approximate time Emergency
intensity
periods are
shown on the
Response
diagram
Having all 3 Crisis Mgmt
responses in
place prior to
an event reduces Business Continuity
the impact on ?
the business & time
minimises 2 hrs 6 hrs 1 day 1 wk 1 month
disruption
1 min
9

10. What is disaster recovery?
 Process, policies and
procedures related to preparing
for recovery or continuation of
technology infrastructure critical
to an organization after
a natural or human-
induced disaster.
 Disaster recovery is a subset
of business continuity
 While business
continuity involves planning for
keeping all aspects of a business
functioning in the midst of
disruptive events, disaster
recovery focuses on the IT or
technology systems that support
business functions
Confidential 10

11. BCM Outcomes
Implementing a BCM program results in the following…
Business Continuity Plans
A detailed set of plans that the company can follow during a crisis to
ensure mission critical services are maintained and disruption is
minimised
Effective Crisis Management
Management have a clear understanding on how to manage the
crisis
A company spokesperson has the skills to talk to the media
Staff knowing what to do…
An organisational understanding of what to do during a crisis
All staff understand and can implement their respective roles during
a crisis
Confidential 11

12. Become certified in Business Continuity
 After implementing a BC
program, companies can become
certified
 Certification can be by either:
 Do a self-declaration that the
company complies
or
 Have a certification company
come in and audit the program to
verify it complies with the
standard selected
Confidential 12

13. Contact details
Need help with…
Business Continuity | Crisis Management | Disaster Recovery | Security |
Investigations
Contact… Andrew Styles
Business Risk & Management Pte Ltd
+66 818935329
andrew.styles@b-r-m.biz
www.b-r-m.biz
13