Resilience and Continuity Detail
Enterprise Value Chain
A company’s Value Chain plays a valuable
role to identify its organizational structure. It groups activities
under specific functional units. The understanding of these
organizational structures allows the accurate determination of critical
functions or products that provide the greatest value to the business
bottom line and resilience capabilities.
The Value Chain allows us to divide the
company’s activities or processes for further examination of the
impact of today’s threats to the company’s bottom line and
resilient capabilities. It also provides information on their
dependencies and need for integrated risk mitigation solutions.
Essential information for a reliable Business Impact Analysis and the development of effective continuity and recovery plans.
Business Continuity Program
To meet today’s physical, natural,
biological, technological and environmental threats companies need to
establish a comprehensive Business Continuity Program supported by a
well defined structure and methodology. This program assures the
continuity and integration of the key processes required to support
Crisis Management, Business Continuity and Technology Recovery
functions. Our program includes proven policies, procedures, process
flows and monitoring metrics for an efficient and repeatable process.
The Business Continuity Program is essential to
assure continuity of the business and provide the necessary tasks to
increase resilience, mitigate business risk and protect your bottom
line and stockholder investment.
Threat Risk Assessment
Today we can no longer just identify our threats
we must evaluate what they mean for the business and its critical
processes. Our methodology to perform this service is based on
today’s NIST standards and specific experiences from real
scenarios during and after 911 and recent weather conditions.
Focus your planning on those threats that are more likely to impact your bottom line or customer service.
Business Impact Analysis
In the world of resilience and continuity the
Business Impact Analysis (BIA) is the most robust tool that will
provide the necessary research for a reliable plan and effective
recovery strategies aligned to the business objectives. The increase of
business changes force us to maintain a "live" BIA, not a document we
redo every few years. Our BIA design and process is adaptable and easy
to implement in any company no matter their size. It provides a very
unique design that allows you to maintain the BIA as a “perpetual
inventory” with minimal effort and cost.
A BIA will make the difference between staying in
business vs. out of business after a failure or major disaster. It
allows you to focus on your critical processes and invest wisely to
protect the business bottom line, customer and stockholder investment.
Crisis & Emergency Management
To adequately manage a crisis, incident or
emergency you must have a comprehensive process that includes
communication, immediate responses, logistic support, training and
awareness. We can no longer rely on the “red” book that
mainly contains names and phones with minimal response strategies and
in many circumstances obsolete.
Our process provides a very comprehensive
Crisis/Emergency Management structure with the necessary tasks that
will maintain and make this document a “live” tool for
management and as a risk mitigation tool to protect the stockholder
investments and our customers.
Business Continuity Planning
We define Business Continuity Planning as the
business element necessary to plan the needed resources and strategies
to assure the business can “continue” to provide its
services to their Customers. We consider this element the main driver
of Business Continuity Management which is complemented by the
technology element called “Technology Recovery Planning”.
The business planning is the forefront image of
our preparedness for any incident or failure that impacts your
services, customers or product delivery. Our methods will allow
you to align this process with the Technology Recovery Planning and
Crisis/ Emergency Management to mitigate any potential risk that can
impact your bottom line, customers or stockholder’s
investment.
Technology Recovery Planning
We define Technology Recovery Planning as the
technology element necessary to ensure that the IT services, facilities
and information are available or can be recovered within the acceptable
and established business requirements. It will focus on the parameters
determine by the Business Impact Analysis (BIA) and the optimal risk
mitigations approved by the enterprise. Technology, as an enabler, is
the key to support the business objectives with resilient systems and
reliable recovery strategies.
Testing and Validation
To successfully increase your resilience you must
use a repeatable testing and validation process. Your personnel should
own and understand the need for testing to achieve reliable business
and technology recovery strategies. Testing and validation are
your best remediation to meet regulations and continue to service
Customers. These processes must identify your “gap” between
success and failure of your continuity, recovery and communication
strategies.
We offer many years of experience on
“testing and validation” with basic and simple templates
and processes adaptable to your business and technology size and
complexity.
Awareness Program
Communication and education is the key to achieve
efficiency, quality and performance of any of our business or
technology functions during a crisis, business or technology
disruption.
“Give a man a fish and you feed him for a day. Teach a man to fish and you feed him for a lifetime”, Lao Pzu
|