As you begin the project, it is important to select an industry that is of interest to you. You may select virtually any industry, including retail, education, telecommunications, hea
As you begin the project, it is important to select an industry that is of interest to you. You may select virtually any industry, including retail, education, telecommunications, health care, finance, etc. Create a fictional business within this industry to be the basis for your project. Imagine yourself in the role of the Chief Intelligence Officer.
In this assignment, complete the first stage of our "Business Continuity Plan (BCP)" by developing the primary outline for the BCP, identifying key aspects of the organization.
It is important to remember that, a BCP is "documented procedures that guide organizations to respond, recover, resume, and restore to a pre-defined level of operation following disruption."
Reference the "FEMA Small Business Continuity Plan Template" and "Risk Assessment Matrix Template," located in the topic Resources, to complete the assignment. The FEMA template can be used, but copying and pasting any section of the document for the assignment constitutes plagiarism and will be treated as such. Use your own words when filling out each section of the BCP.
Develop the Phase 1 content for your company's BCP. Phase 1 should include the following:
- Executive Overview: Be precise and detailed, and provide a thorough understanding of the program.
- Document Change Control: The table should be completed.
- Introduction: Include the overview, plan scope, and applicability that evaluates the appropriateness of cybersecurity frameworks for developing a cybersecurity program to align with business needs, plan objectives, and plan assumptions. Analyze various cyber threat models used to identify and protect against cybercrime threat vectors, motivations, and ideologies.
- Risk Assessment Matrix Template: Complete the "Risk Assessment Matrix Template" provided as this element is not shown in the sample BCP template. Evaluate system risks, threats, vulnerabilities, and practices and processes to ensure the safety and security of business information systems.
- Critical Business Functions Overview: Detail components that are critical to business operations and provide a clear understanding of what the program is designed to address.
- Company Organizational Chart: Create your own as this is not shown in the sample template. Include the following key positions: CEO, CFO, CIO, CISO, and COO.
Submit the BCP, including the completed "Risk Assessment Matrix Template" and Company Organizational Chart.
Support the BCP with a minimum of three scholarly resources.
While APA style is not required for the body of this assignment, solid academic writing is expected, and documentation of sources should be presented using APA formatting guidelines
<Organization Logo>
<Company Name> Business Continuity Plan <Date>
Template provided by:
[Company Name] Business Continuity Plan
Page 2 CONFIDENTIAL Document for Internal Use Only
1. Introduction …………………………………………………………………………………………………………. 5
2. Risk Assessment …………………………………………………………………………………………………… 6
3. Critical Business Functions …………………………………………………………………………………… 9
4. Plan Activation Procedures …………………………………………………………………………………. 13
5. Internal communciation procedures ……………………………………………………………………. 14
6. Alternate Facilities ……………………………………………………………………………………………… 15
7. Orders of sucession and delegations of authority …………………………………………………. 17
8. Plan Deactivation ……………………………………………………………………………………………….. 19
9. Employee Contact List ……………………………………………………………………………………….. 21
10. Vendor Contact List …………………………………………………………………………………………… 22
11. Family Emergency Plan ……………………………………………………………………………………… 23
12. Insurance Considerations ……………………………………………………………………………………. 25
[Company Name] Business Continuity Plan
Page 3 CONFIDENTIAL Document for Internal Use Only
EXECUTIVE OVERVIEW
This Business Continuity Plan template provides a framework, guidance, and concept of
operations to support businesses to continue and/or rapidly restore their critical business
functions in the event of a disruption to normal operations. This template includes an
overview of continuity operations, outlines the approach for supporting an
organization’s critical business functions, and defines the roles and responsibilities of
staff. It also outlines the orders of succession, notification procedures and
communication methods, plan activation and deactivation protocols, provisions for
alternate work locations, and the plan for maintaining and restoring access to vital
records. Language in italics is intended to be directional or sample language.
This document establishes procedures and processes to maintain operational continuity
for businesses based on three types of disruptions that could occur individually or in any
combination:
• Loss of access to parts of or the entire facility (e.g., following a fire, sudden
storm, or flooding);
• Loss of services due to a reduction in workforce (e.g., during pandemic
influenza);
• Loss of services due to equipment or systems failure (e.g., information
technology (IT) systems failure, electrical grid failure).
This document serves as a template at all times and is intended to be customized at each
step to fit the needs of the business owner or designee. Adjustments and additions to the
framework laid forth in this document are welcomed. The more functional the document
is for an organization the greater success they will have navigating an emergency event.
For more information on developing a Business Continuity Plan please contact the
Arlington County Department of Public Safety Communications and Emergency
Management.
[Company Name] Business Continuity Plan
Page 4 CONFIDENTIAL Document for Internal Use Only
Document Change Control
Date Change/Review
[Company Name] Business Continuity Plan
Page 5 CONFIDENTIAL Document for Internal Use Only
1. INTRODUCTION
Overview
Continuity of Operations (COOP) planning ensures businesses are able to continue
or immediately resume performing their organization’s critical business functions,
which are the functions that support the organization’s mission, comply with legal
requirements, and support life-safety, under all circumstances. This includes natural,
technological, and man-made incidents, as well as incidents that result in loss of
access to parts of or an entire facility or loss of service due to equipment or systems
failure. The benefit of COOP planning includes the ability to anticipate response
actions following a myriad of incidents, improve the businesses performance of its
critical business functions, and ensure timely recovery.
Plan Scope & Applicability
The scope of this plan covers [Company Name]. The plan is applicable once the life
safety of employees, customers, and guests has been verified and in the event that a
facility is or will become inaccessible. It can be active during normal business hours
and after hours, with and without warning.
Plan Objectives
The [Company Name] Business Continuity Plan objective is to facilitate the
resumption of critical operations, functions, and technology in a timely and
organized manner to ensure a viable and stable organization. In doing this it is
critical to ensure the safety and well-being of employees, customers, and guests.
The primary objectives of the plan are to:
• Maintain Critical Business Functions
• Most critical departments/business functions
• Ensure employees are able to access an alternate facility
• Ensure that employees have safe access to facility
• Protect vital records
• Ensure that they are accessible under all conditions
Plan Assumptions
The following assumptions were used while creating this plan:
• An event has occurred that affects normal business operations.
• There is limited or no access to the affected facility.
• Documents and equipment within the facility are inaccessible.
• Qualified personnel are available to continue operations.
[Company Name] Business Continuity Plan
Page 6 CONFIDENTIAL Document for Internal Use Only
2. RISK ASSESSMENT
The following table reflects hazard probability assumptions gathered from the 2017 Northern
Virginia Hazard Mitigation Plan.
Table 1 2017 Hazard Mitigation Analysis
Hazard Probability Magnitude Warning Duration Risk Priority
Flooding
4. Highly
Likely
3. Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24
hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12
hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
Coastal
Hazards (e.g.,
Hurricane
Tsunami
Tropical
Storms
Nor’Easter)
4. Highly
Likely
3. Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24
hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12
hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
Thunderstorms
/
Lightning/Hail
4. Highly
Likely
3. Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24
hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12
hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
Tornado
4. Highly
Likely
3. Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24
hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12
hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
Winter Storms/
Ice Storms
4. Highly
Likely
3. Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24
hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12
hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
High Winds
4. Highly
Likely
3. Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24
hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12
hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
Wildfire
4. Highly
Likely
3. Likely
4. Catastrophic
3. Critical
2. Limited
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24
4. 12+ hrs.
3. 6 – 12
hrs.
High
Medium
Low
[Company Name] Business Continuity Plan
Page 7 CONFIDENTIAL Document for Internal Use Only
2. Possible
1. Unlikely
1. Negligible hrs.
1. 24+ hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
Landslide
4. Highly
Likely
3. Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24
hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12
hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
Earthquake
4. Highly
Likely
3. Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24
hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12
hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
Low
High
Medium
Low
*Note: The below table can be completed based on the business owner or designee’s
assessment of hazards facing the company that are not included in table 1.1. Though the
impact and duration of hazards for your business may differ from this table.
Table 2 [Company Name] Hazard Mitigation Analysis
Hazard Probability Magnitude Warning Duration Risk Priority
4. Highly
Likely
3 Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24 hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12 hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
4. Highly
Likely
3 Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24 hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12 hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
4. Highly
Likely
3 Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24 hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12 hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
4. Highly
Likely
3 Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24 hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12 hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
4. Highly
Likely
3 Likely
4. Catastrophic
3. Critical
2. Limited
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24 hrs.
4. 12+ hrs.
3. 6 – 12 hrs.
2. 3 – 6 hrs.
High
Medium
Low
[Company Name] Business Continuity Plan
Page 8 CONFIDENTIAL Document for Internal Use Only
2. Possible
1. Unlikely
1. Negligible 1. 24+ hrs. 1. < 3 hrs.
4. Highly
Likely
3 Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24 hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12 hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
4. Highly
Likely
3 Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24 hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12 hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
4. Highly
Likely
3 Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24 hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12 hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
4. Highly
Likely
3 Likely
2. Possible
1. Unlikely
4. Catastrophic
3. Critical
2. Limited
1. Negligible
4. Minimal
3. 6 – 12 hrs.
2. 12 – 24 hrs.
1. 24+ hrs.
4. 12+ hrs.
3. 6 – 12 hrs.
2. 3 – 6 hrs.
1. < 3 hrs.
High
Medium
Low
[Company Name] Business Continuity Plan
Page 9 CONFIDENTIAL Document for Internal Use Only
3. CRITICAL BUSINESS FUNCTIONS
Overview
Critical business functions are those functions and critical activities that an
organization must maintain in a continuity situation, when there has been a
disruption to normal operations, in order to sustain the mission of the
organization, comply with legal requirements and support life-safety. They are the
backbone of a business and must be continued in order for the organization to
meet its mission. These functions are not meant to be the name of a division,
program, unit, etc. but meant to be the actual process/function that must be
continued. These processes/functions can be supported or ‘owned’ by different
divisions/units but the unit itself is not a critical business function.
How To Complete The Critical Business Function Table
The following information details how to complete elements of Table 3 located on
page XXXX. When completing this table minimize the use of acronyms and
describe actions in plain terms so that staff members who may be unfamiliar with
the function will be able to use the document to resume and sustain the critical
business function, if necessary.
Function
Enter the specific function that may need to be resumed.
Business Process to Complete
Write a high-level description of the function process. Include any specific forms
or systems that may be needed.
Supporting Activities
Supporting activities are those tasks performed to achieve a critical business
function and should be described.
Lead Point of Contact (POC) and Alternate
Identify and include contact information, if necessary, for staff POCs for each
supporting activity.
Vendors and External Contacts
Identify and include contact information, if necessary, for vendor POCs for each
supporting activity.
[Company Name] Business Continuity Plan
Page 10 CONFIDENTIAL Document for Internal Use Only
Vital Records
Vital Records are those records a business needs to sustain the mission of the
organization and comply with legal requirements. Vital records must be stored in
multiple places in multiple formats. The identification, protection, and ready
availability of vital records needed to support essential functions are critical
components of a successful COOP Plan. They must be protected against damage
and loss, and must be kept current, complete, and available in multiple formats.
By protecting and storing vital records in redundant fail-safe formats, such as
hard copies, alternate database locations, virtually, on external hard drives etc.
staff can access vital records that contribute to the business’s rapid resumption of
critical business functions.
Examples of documents that should be considered vital records are as
follows, but not limited to:
• Policies and procedures, contracts, memorandums of
agreement/understanding, insurance information and payroll
• An electronic and hard copy list of staff members and their
contact information
• Necessary keys, access codes, or passwords
• Continuity facility location and directions
Over time, records can become outdated and insufficient representation of current
plans, procedures, records, etc. is possible. It is essential that records are updated
appropriately following a predetermined schedule. If vital records are not
updated and thusly destroyed, incomplete or inaccurate information may be relied
upon during emergencies and outdated information and records can slow the
continuation and reconstitution of essential functions.
Maximum Allowed Downtime
Identify the amount of time your business could afford for the function to be down
before it could cause the business irreparable harm. Consider using the following
units:
• Less than 24 hours
• 1 day to 1 week
• 1 to 2 weeks
• 2 to 4 weeks
• 30 days or greater
Criticality
Enter High, Medium, or Low depending on how critical the function is to the
operations of your business. Following are some considerations to use when
determining criticality:
• What business objective/goal does this function support?
• How often does this function occur?
• How many business units (departments) perform this function?
[Company Name] Business Continuity Plan
Page 11 CONFIDENTIAL Document for Internal Use Only
• Does the successful completion of this function depend on any
other functions?
• Are other functions dependent on this function for its successful
completion?
• Is there a potential for revenue loss if this function is not
completed?
• Is there a potential for fines, litigation, additional do
Collepals.com Plagiarism Free Papers
Are you looking for custom essay writing service or even dissertation writing services? Just request for our write my paper service, and we'll match you with the best essay writer in your subject! With an exceptional team of professional academic experts in a wide range of subjects, we can guarantee you an unrivaled quality of custom-written papers.
Get ZERO PLAGIARISM, HUMAN WRITTEN ESSAYS
Why Hire Collepals.com writers to do your paper?
Quality- We are experienced and have access to ample research materials.
We write plagiarism Free Content
Confidential- We never share or sell your personal information to third parties.
Support-Chat with us today! We are always waiting to answer all your questions.
