Business Continuity Planning

Many organizations are not sufficiently prepared to respond to incidents that threaten their businesses. Losing critical systems, processes or data could send an organization into a tailspin.

In today's economy, the ability to quickly recover from downtime or help prevent it is not an option - it is a critical success factor. Enterprise Risk Management's BCP services assist organizations in developing flexible end-to-end solutions that maintain the availability of their information system infrastructure, critical data and core business processes. Our BCP framework addresses the following phases of plan development:

1. Risk Assessment: ERM can help in the identification and documentation of all potential threats, the probability of their occurrence and also their impact. We can also help in the Enterprise-wide assessment of systems, applications and functions and establish the time period for which the organization can live without it based on their criticality.
2. Business Impact Analysis: ERM can help in the systematic process of gathering and analyzing information about an organization's essential functional and operational business units and processes. This information is then used to determine what the impacts on the organization would be if these functions and processes were interrupted.
3. Continuity Strategy Selection and Drafting of Emergency Procedures: Upon completion of the RA and BIA, ERM can help select a Continuity Strategy taking into consideration the size and complexity of your organization. Upon selection of an appropriate strategy, emergency procedures will be drafted for all critical functions and applications. As an added precaution, wherever possible, manual procedures will be incorporated to circumvent the applications and systems.
4. BCP Testing, Training and Awareness: Upon formulation of the BCP, the plan needs to be tested to ensure effectiveness. ERM can help by providing testing scripts to evaluate each and every part of the plan and help rectify any discrepancies that are identified. ERM can also help conduct training and awareness programs to ensure that all employees are made familiar with the plan and can follow the necessary steps in the event of a disaster.

The entire process is geared towards providing organizations as well as stakeholders comfort that if the worst happens, the organization will recover quickly and cost effectively.