HENRY EE, FBCI, CBCP

Transcription

1 10 Things You Should Know When Reimagine Your ERM With BCM Program 27 July 2016 Presented by : Henry Ee, FBCI, CBCP, ISO22301 LA, Fellow of Business Continuity Institute (FBCI) Certified Business Continuity Professional (CBCP) President for Business Continuity Institute (BCI) Asia HENRY EE, FBCI, CBCP Founder and Director, Business Continuity Planning Asia Pte Ltd (BCP Asia) Asia Regional Director, Business Continuity Institute (BCI) Appointed SPRING BCM Auditor 1

2 Agenda Current threats and their impact 2

3 Current threats Earthquake Sichuan 2008 Tomorrow Cyclone Nargis Myanmar, 2008 Importance of BCM 3

4 Importance of BCM Terrorist / Sabotages Cyber Security Disaster Risk Reduction Changes in Expectations, Technology & Business Models Fast Changing Technology Regulator involvement Misconceptions 4

5 Misconceptions BCM IT Disaster Recovery Fire evacuation plan Crisis Management Emergency Management Enterprise Risk Management Standards & guidelines 5

6 Standards & guidelines ISO Societal Security ISO SOX BASEL II SPRING SS540 BS & 2 ITIL NFPA1600 Good Practice Guides (GPG) Business Continuity Institute (BCI) ISO CoBIT HB221 & HB292 MS1970 ISO Make Reference to ISO22301, ISO22313 and GPG 2013 Good Practice Guideline 2013 ISO22301 ISO

7 Integration of Relevant Disciplines Assess potential threats and find ways to avoid/mitigate them Risk Management Involves life and safety preparedness, response and recovery in order to contain the impact of disasters Deals with recovering and protecting a business IT infrastructure (IT) Disaster Recovery BCM Emergency Management Involves dealing with threats before, during, and after they have occurred. Crisis Management Supply Chain Management Identify and manage supply chain disruption threats Competencies 7

8 Competencies Ensure all personnel are able to run the project? Pass the audit/ certification? Or response to Crisis? How to Start BCM programme 8

9 How to Start BCM programme The status of BCP at your site Have you started yet? IT Recovery Plan or Business Continuity? What are the support and resources available? Emergency Response, BIA or Risk Assessment DONE? Decide to start all over or just modify? Main driving force 9

10 Main driving force To meet customers To ensure instill good requirements business survival corporate governance during disaster Top Management To improve competitive advantage Support To comply with statutory and regulatory requirements Certification benefits 10

11 Certification benefits Helps to increase an organization s resilience to business disruptions Provides the capability to adequately react to disasters Builds confidence in customers and shareholders Differentiates your organization from other competitors Projects a favourable corporate image as a "well-prepared" organization Common problems faced 11

12 Common problems faced Programme management Senior management buy-in Understanding the organisation Appointing the wrong people in the project Delay in sign-off of documents Determining BCM Strategy Balancing cost and strategy implementation Critical Success Factors 12

13 Critical Success Factors Require Senior Management s Support Commitment to the BCM program by all level within the organization No money = No recovery BCM is not just plans and equipments, It is about the PEOPLE! o Appropriate staff allocation o Adequate and continuous training 13

14 Our Advantages Business C P A SContinuity I A Expertise ustomised Solutions roven Track Records sia Market Know-How ystematic Approach ntegrated Solutions pproved Course by BCI Tel: (65) Fax: (65) enquiry@bcpasia.com 1 Commonwealth Lane #08-27 One Commonwealth Singapore