Week 03 - Part 02 & Week 4 - Part 01: Creation of a BCP

Question 1

What are the 5 steps/sections of Public Safety Canada’s Methodology for a BCP?

Answer 1

1. BCP Governance
2. Business Impact Assessment (BIA)
3. Plans, Measures, and Arrangements for business continuity
4. Readiness procedures
5. Quality Assurance techniques (exercises, maintenance, and auditing)

Question 2

What is the purpose of a BCP Governance? (6)

Answer 2

1. Creating a structure for Senior Managers or a BCP Committee.
2. Clarifying roles and responsibilities
3. Oversee, review approve and monitors BCP related plans, activities and initiatives
4. focus on system (rules, practices and processes) by which the organization is controlled and directed
5. Resolves conflicting issues and priorities
6. Overall foundation of the BCP as it provides strategic direction

Question 3

What is Public Safety Canada’s Definition of Business Impact Assessment (BIA)?

Answer 3

The process of determining the impact on an organization should a potential loss identified by the risk analysis actually occur.

The BIA should quantify, where possible, the loss impact from both a business interruption (number of days) and a financial, loss, of life or other standpoint.

Question 4

What is Governance and Emergency Management Canada’s definition of a Business Impact Assessment (BIA)?

Answer 4

Provides the foundation for both business continuity strategy and business continuity planning.

It identifies, quantifies, and qualifies the impacts of loss, interruption, or disruption of critical activities of an organization and provides the data from which appropriate continuity strategies can be determined.

Question 5

What are the 5 steps to developing a Business Impact Assessment?

Answer 5

1. Identify the mandate and critical aspects of an organization
2. Prioritize critical services or products
3. Insurance requirements
4. Ranking
5. Identify dependencies

Question 6

Under the second step of developing a BIA, prioritize critical services or products, what are the 4 sub-steps?

Answer 6

1. identify impacts of disruptions
2. Identify areas of potential revenue loss
3. Identify additional expenses
4. Identify intangible losses

Question 7

(Week 4) What are Plans, Measures & Arrangements in Business Continuity? (5)

Answer 7

1. Mitigating threats and risks
2. Analyze current recovery capabilities
3. Create continuity plans
4. Response preparation
5. Alternate facilities

Question 8

(Week 4) What occurs in step/section 4 of a Business Continuity Plan (Readiness and Procedures) and how is it completed?

Answer 8

At this stage of the business continuity plan, the implementation and testing process is examined.

This is usually completed through training and exercise.

Question 9

(Week 4) What do training and exercises accomplish? What do they indicate to us?

Answer 9

Vulnerabilities

Question 10

(Week 4) What does the step/section Quality Assurance Techniques do for a BCP? (3)

Answer 10

1. Review of the BCP should assess the plan’s accuracy, relevance and effectiveness
2. It should also uncover which aspects of a BCP need improvement
3. Continuous appraisal of the BCP is essential to maintaining its effectiveness. Appraisal can be performed by an internal review, or by an external audit