Top 5 Things to Transform your Business Continuity Program

Transcription

1 Top 5 Things to Transform your Business Continuity Program

2 John Liuzzi National Director of Business Continuity Southern Glazer s Wine & Spirits

3 Tejas Katwala Co-Founder & CEO Continuity Logic

4 5 Transformative Steps 1. Centralization 2. Measurement Obsession 3. Evaluation and Scoring 4. Real-time Execution 5. Flexibility to Adapt in Seconds

5 1 Centralization Content, Context, and Collaboration

6 Centralization One integrated single repository and source of record for all program information built on an agile platform (people, processes, technology, facilities, locations, vendors) Roles driven, easily accessible from any device or browser to all program content with Guidance Program workflow and notification automation empowers integrity in the content, context, and milestones to deliver situational awareness for insightful decisions Intelligent mapping and visualizations of critical dependencies and modeling analyses Enforced by established business rules that ensure consistency and cohesiveness of all plan development and execution activities

7 Assets Facilities Processes People Technology Vendors 1. Enterprise data relevant to Business Continuity is loaded into the system from all sources 2. Any plan, documentation, metric, or report can be created, published, and distributed instantly using live real-time data Continuity Plans Incident Management Simulations Mobile Plans Dashboards Status Reports Risk Assessments Maintenance and Testing Schedules Metrics Business Continuity and Risk Management 3. Business Process Owners use standardized templates and Guide Me wizards to collect, connect and improve enterprise data, perform assessments, & continuity plans 4. Plan and process owners interact with the system on a regular basis receiving automated, scheduled notifications and reminders to review, update, test, and train their plans.

8 2 Measurement Obsession

9 Measurement Obsession Analytics and metrics that provide visibility and insight into program scope, progress, and maturity supporting decisions Real-time reporting, intelligence and assessments Measure program activity, then improve, mature, scale, and comply

10 10 Three Tier Distribution System Massive Scope, Supply Chain & Regulatory Complexity Producers Wineries Breweries Distillers Distributors Wholesalers Retailers Stores Restaurants Bars

11 John Liuzzi Slide not for public John covered slides on the scope, supply chain and complexity numbers at SGWS:

12 3 Evaluation & Scoring

13 Evaluation & Scoring Facilitation of plan testing and exercises Modeling and simulations User training modules designed for knowledge transfer and error free use Exercise evaluation and scoring Post incident evaluation and scoring

14 4 Real-time Execution

15 Real-time Execution Integrated platform that enables the real-time seamless execution of: Situational intelligence and threat awareness analysis Incident response and decision making Activation of emergency and crisis management plans and alert communications Actionable game-on execution of business process recovery, continuity plans and Disaster Recovery DR (IT Resiliency) plans and playbooks

16 Crisis Management Plan Crisis Management Plan Overview California Incident Assemble Response Teams Assess and Classify Impact Declare Disaster No Yes Relocate to Alternative Site Choose Recovery Option Communicate with Staff and Stakeholders Escalate and Mobilize Resources Repair and Recover at Primary Site Activate Business Continuity Plan(s) Coordinate Relocation or Recovery Effort Restore Functions, Assets and Staff Monitor Progress Validate Restored Capabilities Throughout all phases of an incident s life cycle, the Crisis Management Plan ensures that the cohesive communication, escalation, execution, and coordination of all activities will occur between all response and recovery teams so that disrupted services and operations are expediently restored to meet established business recovery objectives Assess Plans and Actions Incident Resolved Resume Business Communicate with Staff and Stakeholders

17 Real-time Execution (Hurricane Matthew) 1. Watch 2. Declare 3. Notify 4. Respond

18 Watch Situational Awareness Integrations

19 Declare Incident Manager

20 Notify Emergency Notification Provider Integrations

21 Respond All Information Available to Teams

22 Watch, Declare, Notify, Respond

23 5 Flexibility to Adapt in Seconds

24 Fexibiliy to Adapt in Seconds Ability to rapidly adapt to changing internal and external business and program requirements User customization and configuration drop and drag administration Wide-ranging integration with data sources (internal, external, live feeds) Today s situation awareness / Today s organization awareness / business and situational intelligence at the point of decision

25 10 Second Use Case

26

27 10 Second Use Case It took 10 seconds to improve the BCP program without vendor help

28 Step By Step 1. Conceptualize your Resiliency Program 2. Baseline + Immediate need 3-5 years out 3. Inform your Resiliency Program with internal and external voices 4. Develop your hot button metrics 5. Work on Key Performance and Key Risk Indicators (KPI & KRI)

29 Thanks! Any questions? You can find us at