PP2 Embedding Business Continuity Flashcards
Embedding business continuity includes (4):
- Raising awareness about BC through
communication. - Encouraging buy-in from interested parties.
- Ensuring required competencies and skills in place.
- Ensuring appropriate training and learning opportunities.
Organisational culture can be defined as:
Organisational culture can be defined as the “values, attitudes and behaviour of an organisation that contribute to the unique social and psychological environment in which it operates.” (Source: ISO 22316:2017)
Following steps required when understanding
and influencing organizational culture to ensure successful embedding of BC (4):
- Identify interested parties within organisation
- Determine how best to engage with interested parties.
- Engage and communicate
- Use existing events and communication
channels where possible.
Methods that can be considered for embedding BC programme (8)
- Changing attitudes and behaviour. Useful to identify consequences of action (or inaction).
- Ensuring BC considered by top management
when organization’s strategic plan is developed or reviewed. - Including BC on relevant meeting agendas.
- Incorporating BC plans into standard operating
procedures. - Including BC awareness as part of induction
processes. - Scheduling BC exercises to coincide with planned
shutdowns or quieter times. - Ensuring BC requirements are considered as part of
supply chain management. - Ensuring new products or services consider BC
during planning stages.
Specific core competencies and general management skills required of BC professional (6)
Management skills required in all professional practices:
- Understanding of context of organization
- Ability to form an organization-wide view.
- Ability to understand and collaborate with personnel
- Effective communication and interpersonal skills.
- Negotiating and influencing skills
- Facilitation skills to guide and direct workshops, planning, sessions, meetings, training, and exercises to achieve productive outcomes.
Specific core competencies and general management skills required of BC professional:
Management Practice PP1 – Policy and
Programme Management
Project management skills and understanding of
importance of continual improvement.
Specific core competencies and general management skills required of BC professional:
Management Practice PP2 – Embedding BC
- Understanding of organizational culture and how to
influence it. - Knowledge of BC competencies and skills required
Specific core competencies and general management skills required of BC professional:
Technical Practice PP3 - Analysis
- Analytical skills relating to BIA
2. Understanding of risk assessment and mitigation measures
Specific core competencies and general management skills required of BC professional:
Technical Practice PP4 - Design
Ability to design and select appropriate continuity
solutions for organization.
Specific core competencies and general management skills required of BC professional:
Technical Practice PP5 - Implementation
- Understanding of incident and crisis management,
including knowledge of emergency response. - Ability to develop, implement and manage plans.
Specific core competencies and general management skills required of BC professional:
Technical Practice PP6 - Validation
- Ability to develop, manage, coordinate, and deliver an
exercise programme. - Evaluation skills to validate effectiveness of BC programme
Additional skills that may be required in an organization that may be outside of core competencies and skills (7):
- Emergency evacuation direction.
- Security.
- Welfare and frst-aid.
- Crisis management and leadership.
- Information and communication technology (ICT) service continuity and disaster recovery.
- Damage management, asset salvage and equipment restoration.
- External and internal communications to include public relations, brand, and reputation management
To ensure appropriate level of awareness, education and training is established for successful embedding, the
following steps should be taken (4):
- Define competencies and skills
- Determine training and awareness needs
- Design and deliver appropriate level of training
- Evaluate and report effectiveness
Additional ways to determine training and awareness needs (4):
- Reviewing documentation
- Getting feedback from personnel
- Observation, including reviews of current working practices.
- Internal and external audit reports
Conclusions reached from gap analysis or alternate
methods may include the following (4):
- No training or awareness activities are required.
- Some training or awareness is needed.
- Extensive training and awareness is required.
- Recruitment of an experienced person is required.
- Specific skills are required for a short time only and can be provided by outsourced service provider.