Testing BC Plans
1 like259 views
The document details a presentation by Continuity and Resilience, a consulting firm specializing in Business Continuity Management (BCM) and related services, highlighting their ISO 22301 certification and various offerings such as crisis management, cyber security, and training. It outlines best practices for BCM implementation, testing methodologies, and the importance of continuous improvement, while also providing insights into their global experience and partnerships. Additionally, the firm emphasizes their unique qualifications, success in training professionals, and the benefits of e-learning for clients.
Testing BC Plans
- 1. Continuity and Resilience (CORE) ISO 22301 BCM Consulting Firm Presentations by speakers at the 6th Middle East Business & IT Resilience Summit Mar 30, 2017 at The Address ā Dubai Mall Our Contact Details: UAE INDIA Continuity and Resilience P. O. Box 127557 Abu Dhabi, United Arab Emirates Mobile:+971 50 8460530 Tel: +971 2 8152831 Fax: +971 2 8152888 Email: info@coreconsulting.ae Continuity and Resilience Level 15,Eros Corporate Tower Nehru Place ,New Delhi-110019 Tel: +91 11 41055534/ +91 11 41613033 Fax: ++91 11 41055535 Email: info@coreconsulting.ae
- 2. Daman Dev Sood COO & Head ā Sustainability Practice CORE d.sood@continuityandresilience.com www.coreconsulting.ae Testing BC Plans
- 3. About Continuity and Resilience (CORE) ļISO 22301 certified Management Consulting Firm ļCyber Security Services ļBusiness Continuity Management Services ļCrisis Management Services ļIT Disaster Recovery Services ļInformation Security Management Services ļRisk Management Services ļGreen IT/ Sustainability Services ļWe Consult / Train / Assess and Certify in these domains 3
- 4. Typical BCM Implementation Methodology 4 Quite easyā¦..correct?
- 5. 5 So where do where do we start?
- 6. ā¢ Make a Testing Program Plan ā¢ Make a Test Plan for each test ā¢ Conclude a test with a Test Report ā¢ Close through follow up ā¢ A BC test should create least disturbance to the business Good Practices 6
- 7. ā¢ Estimate resources ā¢ Raise the bar slowly ā¢ Involve all relevant interested parties ā Plan owner ā BC Champion ā BC Manager ā Supporting functions (HR, Finance, IT, Facilities etc.) ā Team members ā Management ā Customers, suppliers. Vendors ā Authorities Good Practices 7
- 8. ā¢ Keep relevance ā¢ Start and stop criteria ā¢ Measure of success ā¢ Fire evacuation drill is not fire alarm test Good Practices 8
- 9. ā¢ Check effectiveness ā How many were scheduled ā How many were conducted ā How many were conducted on schedule ā How many were successful ā How many action items emerged ā How many actions have been closed ā How many actions are open ā for how long and for what reasons Good Practices 9
- 10. BC Exercising ā Types (and other parameters) 10 0 1 2 3 4 5 6 7 Review/ Walkthrough Table Top Call Tree Simulation IT/ Work Area Recovery Integrated Cost Complexity Risk (of distrurabnce due Test) Assurance Frequency Graph not to scale Cost Complexity Risk Assurance Frequenc y
- 11. Thank you! Daman Dev Sood Continuity and Resilience * d.sood@continuityandresilience.com ļ½ www.coreconsulting.ae 11 15 Continue to know more about COREā¦
- 12. About CORE 12 ā¢ Crisis Management ā¢ Crisis Communications ā¢ Business Continuity ā¢ Disaster Recovery ā¢ Cyber Security Country ā¢ India ā¢ USA ā¢ Canada ā¢ UK ā¢ Europe ā¢ Africa ā¢ Middle East Institutions ā¢ Business Continuity Institute (BCI) ā UK for offering BCM Certification ā¢ Intertek and Bureau Veritas āfor offering ISO 27001/ ISO 22301 courses ā¢ American University of Ras Al Khaimah ā for offering certification courses Our Range of Specializations in Consultancy & Training cover: Global Experience Our Partnerships ā¢ Sustainability ā¢ Information Security ā¢ IT Service Management ā¢ Project Management ā¢ Quality Industry ā¢ Financial Services ā¢ Telecom ā¢ Manufacturing ā¢ Airlines ā¢ Trading ā¢ Oil and Gas ā¢ Government .
- 13. Continual Improvement Our Services 13 We are a firm that specializes in the complete Resilience cycle, offering Consulting, Assessments, Trainings and Certification Services for organizations in both the public and private sectors. We too are certified ISO 22301:2012 firm. Information Technology Disaster Recovery Crisis Management Business Continuity Management IT Disaster Recovery Trainings Testing & Exercising Crisis Communication Crisis Management Trainings Testing & Exercising Consulting Implementation Audits Maturity Assessment Trainings Testing & Exercising Design & Implementation ā¢ Training and Awareness ā¢ Exercising and Testing ā¢ Audits ā¢ Continuity and Recovery Strategies ā¢ Crisis Management ā¢ Incident Response Structure ā¢ Business Continuity Plan ā¢ Crisis Management Plan ā¢ Incident Management Plan ā¢ Gap Assessment ā¢ Business Impact Analysis ā¢ Risk Assessment Validation Analysis EmbeddingBusinessContinuity PolicyandProjectManagement ISMS and Cyber Services ā¢ GRC ā¢ Managed Security Services ā¢ Trainings
- 14. How are we different? 14 1 2 3 We have trained over 2000 professionals from 500 organizations Our consultants have performed approximately 80 mandays of ISO 22301 / BS 25999 assessments 4 We conduct public and inhouse workshops for BCM Training and Professional Certifications and help organisations run Crisis Management and Table Top exercises and simulations We are an ISO 22301 certified company
- 15. How are we different? (Contd.) 15 5 6 7 Our consultants are experienced BCM professionals who held senior management positions mostly as heads of functions Our consultants have over 140 + man years of collective experience ranging accross geographies and industries Most of our consultants hold multiple certifications in BCM and other related domains 8 Many of our clients have been certified to ISO 22301 / BS25999, based on our consulting for them
- 16. Cyber Security / Information Security 16 Capacity Building & Skill Dvlp ā¢ Corporate Instructor Led Trainings ā¢ Cyber Attack Simulation Exercise ā¢ Customised training for Corporate ā¢ Public Certification Aspirants Workshops (CISSP, CISA, CISM, CRISC) Professional Services ā¢ Governance, Risk & Compliance ā¢ CERT & CSIRT (BOMT Model) ā¢ Forensics & Investigations / VAPT ā¢ Gap Analysis / Health Checks & Pre Audit Services Managed Security Services ā¢ CSIRT as a Service ā¢ SOC (remote, BOMT/O&M) ā¢ Predictive Security through Threat Hunting & Counter Threat Intelligence ā¢ Forensics & Investigation Services Products ā¢ Confront & Denial of Operations Area through Smoke Screen ā¢ Forensics Workstation & DDoS Protection Tool ā¢ Employee Forensics & Monitoring Tool ā¢ Mobile Device Management & Mobile Data Security
- 17. Assurance & long term sustainability Validation of documented steps Effective & coordinated response during crisis in order to minimize decision points at the time Identify potential threats & take measures to mitigate impact Focus on high priority items Maturity Assessment Industry Benchmarking Current State Assessment Implementation BC Strategy & Response Risk Assessment Business Impact Analysis Program Management Plan Operationalizethe BCMS Continual Improvement Performance Evaluation Exercising Testing InitialAssessment& Roadmap Assessment Report Implementation Review Documentation Review Interview Senior Management Implementation Operationalize the BCMS Initial Assessment Benefits The salient points that will be covered by CORE BCM consulting are illustrated below : Consulting BCM Consulting Assignment 1721
- 18. Trainings Public Programs ā¢ Global Certifications like BCI, IRCA ā¢ CORE Certifications In-house Workshops ā¢ Global Certifications like BCI, IRCA, ā¢ CORE Certifications Tailor-made ā¢ Customized to clients ā¢ Specialized coverage ā¢ Awareness Education ā¢ Simulated Exercises 18
- 19. Some of our Trainings ā¢ Cyber Attack Simulation Exercise ā¢ ISO27001 on the ground implementation workshop ā¢ Crisis and Disaster Management Simulation Exercise ā¢ Senior Management Awareness workshops ā¢ ISMS and BCMS coordinators training workshops ā¢ BCI-UK certified GPG workshops (leading to CBCI) ā¢ Certification aspirants workshops for CISSP, CISA, CISM and CRISC ā¢ ISO 27001 and ISO22301 Lead Auditor training ā¢ ISO 31000 Risk Management and IT Disaster Recovery Certification 19
- 20. Tools Support CORE acts as a conduit between the partner & client by providing support for: ā¢ Gather requirements ā¢ Shortlist Vendors ā¢ Subject matter expertise for tool selection ā¢ Perform Vendor Demos ā¢ Tool installation & implementation support for BC, ITDR & Notification ā¢ Assistance during tool testing 20 Benefits
- 21. E-learning Support Benefits of E-Learning for our clients: ā¢ Higher coverage ā¢ Consistency in communication ā¢ Higher learning retention ā¢ Learn at your own pace, anytime and anywhere ā¢ Latest and most updated course ware always available ā¢ Cost effective as against class room based training ā¢ Saves paper reduces carbon foot print 21 Crisis Management 1 Business Continuity 2 ITService Management 6 Sustainability7
- 22. Some of Our Consulting and Training Clients 22
- 24. Thank you! Daman Dev Sood Continuity and Resilience * d.sood@continuityandresilience.com ļ½ www.coreconsulting.ae 24 15 End of presentationā¦ā¦ 28