Develop, maintain and evaluate business continuity plans and arrangements
Overview
This standard is about developing, maintaining and evaluating business continuity plans and arrangements to ensure that organisations continue to exercise core functions in the event of a business disruption or emergency. You develop business continuity plans in collaboration with colleagues, team members and stakeholders and confirm the scope and objectives. You evaluate your organisation's structures and processes and assess alternative strategies to mitigate the effective of business disruption. You also produce a framework for business continuity management, ensuring that resources are proportionate to the potential impact. The standard includes presenting your plans and encouraging colleagues and team members to take ownership, providing training if required.
This standard is for all managers and leaders.
Performance criteria
You must be able to:
- develop business continuity plans and arrangements by collaborating with colleagues, team members and stakeholders
- confirm the required aim, scope and objectives of business continuity plans and arrangements
- identify key products or services and the critical activities and resources that support them
- evaluate the resilience of the structures and processes of the organisation and external organisations
- identify and assess alternative strategies to mitigate the effects of business disruption or emergencies
- develop business continuity plans and arrangements that can mitigate the effects of business disruption or emergencies
- produce a framework for business continuity management, co-ordination and control
- develop procedures for determining when the business continuity plan must be invoked
- define roles and responsibilities of colleagues and team members involved in business continuity management, co-ordination and control
- outline prioritisation of organisational processes or services
- develop procedures for activating response arrangements
- agree provision of resources to support business continuity plans
- provide resilient information and communications systems
- check that the resources committed to business continuity management are proportionate to the potential impact of business disruption or emergencies
- present business continuity plans and arrangements to colleagues, team members and stakeholders to promote understanding
- establish the ownership of business continuity plans and arrangements within different business units
- communicate business continuity plans and arrangements to colleagues, team members and other stakeholders
- arrange training for colleagues and team members
- provide exercises to validate and practice business continuity plans and arrangements
- review business continuity plans systematically in response to organisational changes, changes to the potential impact of disruption or emergencies and lessons identified from incidents and exercises
Knowledge and Understanding
You need to know and understand:
- how to engage colleagues, team members and stakeholders in developing business continuity plans and arrangements
- the legal, organisational, codes of practice and policies relevant to your role and the activities being carried out
- how to confirm the aim, scope and objectives of business continuity plans and arrangements
- the importance of involving stakeholders in the business continuity planning process and recognising their requirements and expectations
- the potential impact of disruption or emergencies on the organisation
- how to analyse the impact of disruptions or emergencies on the business
- the local arrangements for managing emergencies
- how to develop a framework including the procedures for determining when the business continuity plan must be invoked, the roles and responsibilities of key people in the organisation, prioritisation of organisational processes or services
- the procedures for activating response arrangements, provision of resources (e.g. people, premises, technology, equipment)
- how to provide resilient information and communications systems
- how to identify aspects of business continuity planning which can be addressed by training
- how to plan for provision of resources in the event of a business disruption or emergency
- the information needs following a business disruption or emergency
- how to identify critical and non-critical functions of the organisation
- the organisation's structure, governance and business processes
- the organisation's priorities for processes or service delivery
- the methods of raising awareness of business continuity plans and arrangements
- the importance of obtaining ownership of plans and arrangements at the appropriate level
- the importance of developing a business continuity management culture within an organisation
- how and why business continuity plans must be systematically reviewed
Scope/range
Scope Performance
Scope Knowledge
Values
Behaviours
Skills
- Analysing
- Communicating
- Consulting
- Evaluating
- Influencing
- Leadership
- Negotiating
- Networking
- Planning
- Presenting Information
- Prioritising
- Problem solving
- Reporting
- Thinking Strategically