Business Continuity

Playbook

Bob Hayes, Kathleen Kotwica, Dean Correia

• Publisher: Elsevier
• Year: 2013
• Print ISBN: 9780124116481
• eBook ISBN: 9780124165649
• Edition: 2
• Topic: Business
• Subtopic: Management
• Index: Business

The Business Continuity playbook provides the background and tools to create, manage, and execute all facets of an organization's business continuity program (BCP). Business continuity planning is an activity performed daily by organizations of all types and sizes to ensure that critical business functions are available before, during, and after a crisis.This playbook guides the security leader through the development, implementation, and maintenance of a successful BCP. The text begins with a detailed description of the concept and value of business continuity planning, transitioning into a step-by-step guide to building or enhancing a BCP. Its 14 appendices, which include sample forms, templates, and definitions, make it an invaluable resource for business continuity planning.The Business Continuity playbook is a part of Elsevier's Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.- Answers the unavoidable question, "What is the business value of a business continuity program?"- Breaks down a business continuity program into four major elements for better understanding and easier implementation- Includes 14 appendices that provide sample forms, templates, and definitions for immediate adaptation in any business setting

Appendix 1

Specific Job Descriptions and Salary Ranges

Note: These job descriptions are reprinted with permission from Security Careers: Defining Jobs, Compensation, Qualifications, 2nd edition, by Steve Walker and Jerry Brennan, 2010: The Security Executive Council.⁹

A. Manager, Emergency Preparedness/Disaster Recovery

Job Description

This position is responsible for the business strategies associated with the emergency preparedness/disaster recovery function within the organization. The person who fills this position is accountable for overall planning, directing, and organizing activities of the programs, and ensuring their effective operation.

• Plans, develops, and manages the corporate emergency preparedness/disaster recovery programs for the company under senior management direction.

• Implements policies, procedures, and systems required for maintaining and enhancing the overall emergency preparedness/disaster recovery mission.

• Oversees the architecture of recovery systems to include data systems, and data networks to ensure the integrity and security of all electronics data and data systems are adequately protected. This includes: procedure writing; program planning; project design and scheduling; development and delivering training; planning and conducting drills and exercises; designing, developing, and maintaining emergency response facilities and equipment.

• Designs, develops, and conducts drills and exercises.

• Plans, schedules and conducts a wide range of very complex facility and/or site emergency preparedness/disaster recovery drills which could include emergency response training drills, medical drills, fire response drills, nuclear incident monitoring drills, and protective action drills. Determines the need for emergency plans changes and new procedures, and ensures the appropriate government format and content are followed.

• Coordinates with state and local emergency management authorities.

• Maintains expert knowledge of the organization’s processes and hazards, interfaces with engineering and operations staff to ensure appropriate development of a facility and/or site-specific hazard assessment and emergency classification procedures.

• Prepares technical reports based on the expert interpretation of analyzed data.

Qualification Guidelines

Master’s degree in studies relevant to this position and more than six years of emergency management/disaster recovery experience with a major corporation and/or law enforcement, intelligence, public service or private sector security organization; or a bachelor’s degree in studies relevant to this position and more than 10 years emergency management/disaster recovery experience.

B. Senior Emergency Preparedness Specialist IV

Job Description

• Works under consultative direction toward predetermined goals and objectives.

• Assignments are usually self-initiated. Determines and pursues courses of action necessary to obtain desired results.

• Exercises technical discretion within broadly defined practices and policies in selecting methods, techniques and evaluation criterion for obtaining results.

• Oversees the design, development and maintenance of the organization’s emergency preparedness program. This could include: procedure writing; program planning; project design and scheduling; development and delivering training; planning and conducting drills and exercises; designing, developing and maintaining emergency response facilities and equipment.

• Designs, develops, and conducts drills and exercises.

• May manage the scenario development portion of schedule.

• May act as the senior team leader to plan, schedule and conduct a wide range of very complex facility and/or site emergency preparedness drills which could include emergency response training drills, medical drills, fire response drills, nuclear incident monitoring drills, and protective action drills.

• Determines the need for emergency plans changes and new procedures, and ensures the appropriate government format and content are followed.

• May coordinate with state and local emergency management authorities.

• With expert knowledge of the organization’s processes and hazards, interfaces with engineering and operations staff to ensure appropriate development of a facility and/or site-specific hazard assessment and emergency classification procedures.

• Prepares technical reports based on the expert interpretation of analyzed data.

• Provides leadership to less experienced specialist and to technicians through work assignments, monitoring schedules and resolving problems.

• May act as lead person or technical expert on projects.

Qualification Guidelines

Bachelor’s degree in an area of study relevant to this position and more than eight years of experience in emergency management with law enforcement, or public or private sector security organization.

C. Emergency Preparedness Specialist III

Job Description

• Works under very general direction.

• Exercises reasonable latitude in determining technical objectives of assignments. Work is reviewed upon completion for adequacy in meeting objectives.

• Works on problems of diverse scope and complexity where analysis of data requires evaluation of identifiable factors.

• Uses technical discretion within generally defined practices and policies in selecting methods and techniques for obtaining solutions.

• Participates in designing, developing and maintaining the organization’s emergency preparedness program. This could include: procedure writing; program planning; project design and scheduling; development and delivering training; planning and conducting drills and exercises; designing, developing and maintaining emergency response facilities and equipment.

• Conducts emergency preparedness drills and exercises. May oversee the scenario development portion of schedule.

• Assists in design and development of training lesson plans and conducts procedure training.

• May lead a project team to plan, schedule and conduct a wide range of complex facility and/or site emergency preparedness drills, which could include emergency response training drills, medical drills, fire response drills, nuclear incident monitoring drills, and protective action drills.

• Participates in identifying the need for emergency plan changes and new procedures, and ensures the appropriate government format and content are followed.

• Provides coordination with state and local emergency management authorities.

• With good working knowledge of the organization’s processes and hazards, interfaces with engineering and operations staff to ensure appropriate development of a facility and/or site-specific haza...

Table of contents

• Cover image
• Title page
• Table of Contents
• Copyright
• Executive Summary
• Foreword
• What Is Business Continuity Planning, and Why Do I Need It?
• How Does a Business Continuity Program Help My Business, and How Is It Managed?
• How Do I Implement the Four Pillars of a Business Continuity Program?
• How Do I Maintain a Business Continuity Program in the Long Term?
• Appendix 1. Specific Job Descriptions and Salary Ranges
• Appendix 2. Advisory Committee Members
• Appendix 3. Corporate Contingency Planning Umbrella
• Appendix 4. Threat Risk Matrix and Heat Map
• Appendix 5. Business Impact Analysis Template
• Appendix 6. CMT/IMT/LRT Member List
• Appendix 7. CMT, IMT, and LRT Member Roles and Responsibilities
• Appendix 8. Crisis Management Meeting Locations and Contacts
• Appendix 9. CMT/IMT Meeting Agenda
• Appendix 10. Critical Incident Decision Matrix
• Appendix 11. Critical Incident Individual Decision Matrix
• Appendix 12. Facility Property Assessment Checklist
• Appendix 13. Incident Report
• Appendix 14. Government Contacts
• References
• About Contributing Editor Dean Correia
• About the Authors
• About Elsevier’s Security Executive Council Risk Management Portfolio
• Industry Applicability Validation