Insurance Institute for Business & Home Safety

Even if the worst happens,

be prepared to stay

What If . . .?

Natural, human-caused, technological or

building-specific disaster Could you contact employees / vendors /

customers? What if your equipment or machinery were

damaged? What if you lost valuable information/data? Would you lose market share or reputation?

WHY PLAN?

Disaster Resilience

“Preparedness is an essentialelement of a resilient and secure Nation.”

Presidential Proclamation, September 4, 2009

Protect Your Business www.DisasterSafety.org/business_protection

• Open for Business® was designed to provide small to mid-sized businesses with the tools needed to start creating a comprehensive business continuity plan.

Protect people and property Resume critical business operations Minimize downtime Remain competitive Preserve reputation Meet obligations

Objectives of Business Continuity Planning

Before You Begin… Senior-level support is critical

BudgetingMake planning a company-

wide priority Engage employees

Planning is more manageable

Employee cooperation and awareness: The plan is only as good as its execution

Planning Process1. Identify potential threats and impacts

2. Establish controls to minimize risk

3. Create procedures for effective response and incident management

4. Recover your business a. Plan for recovery of IT systems & data

b. Develop a business continuity plan (operations)

c. Implement employee awareness/education, training & exercises

d. Maintain & update the plan

Natural hazard events Intentional or

unintentional human-caused incidents

Technological failure High absenteeism Building-specific

problems

Identify Your Risks

What Could Happen - Impacts

Look beyond natural disasters… Geographic location Building structure Building infrastructure Vendor/Supplier continuity Data storage & critical system

recovery Standard company procedures

Put Controls In Place

What can you do to prevent the identified risks from causing a business interruption?

You can’t stop the event, but you can:Mitigate property loss & impacts to businessPrevent loss of data Plan for a recovery locationSet up back-up telecommunications strategiesEncourage employees to return to work, including

supporting family disaster planningTransfer risk

Incident Management and Crisis Communication

Life safety Incident stabilization Damage assessment Property conservation Crisis Communications (employees,

customers, vendors, media)

Recover Your Business www.DisasterSafety.org/business_protection

Recover Your BusinessContacts

Employees Key Suppliers/Vendors Key Contacts/Customers

Recover Your BusinessMaintain Operations

Critical Business Functions Vital Records Critical Telephone Numbers Critical Supplies Equipment/Machinery/Vehicles

Recover Your BusinessOffice Setup

Recovery Location Computer Equipment & Software Voice/Data Communications Miscellaneous Resources

Recover Your BusinessMake It Stick!

Implement company-wide changes:Make BC plan education part of new-hire

trainingAdd BC plan policies and procedures to

employee handbook

Maintain, test and train:Update the plan regularlyTest the plan at least once per yearConduct periodic “reminder” training

Recover Your Business Update

At least once per year (every 6 months is better)

Employee turnover Major policy change

Recover Your Business Test & Refine

Hold regular drillsFire/Tornado

Table top exercises Simulated exercises Full exercises

Is your plan on target?

Open for Business®

www.DisasterSafety.org

Workshop & Online Training

Thank you.Any questions?

Presenter NameTitle/Organization

Phone| E-mailWebsite

DISCLAIMER

IBHS SHALL HAVE NO LIABILITY, IN NEGLIGENCE, TORT OR

OTHERWISE WITH RESPECT TO THE USE OF ANY OF THE

INFORMATION AND/OR PRACTICES DESCRIBED IN THIS

SLIDESHOW.  ALTERATIONS OR MODIFICATIONS TO ANY OF

THE CONTENT OF THIS SLIDESHOW ARE THE SOLE

RESPONSIBILITY OF THE PERSON AND/OR BUSINESS MAKING

SUCH ALTERATIONS OR MODIFICATIONS.  NOTHING

CONTAINED IN THIS SLIDESHOW IS INTENDED OR WRITTEN TO

BE USED, NOR MAY IT BE RELIED UPON OR USED, BY ANY

PERSON AND/OR BUSINESS AS LEGAL ADVICE.