《Business Continuity Plan TplateQueensland Government.doc》由会员分享，可在线阅读，更多相关《Business Continuity Plan TplateQueensland Government.doc（32页珍藏版）》请在三一文库上搜索。
1、Business Continuity Plan Template State of Queensland, 2013. The Queensland Government supports and encourages the dissemination and exchange of its information. The copyright in this publication is licensed under a Creative Commons Attribution 3.0 Australia (CC BY) licence. Under this licence you a
2、re free, without having to seek our permission, to use this publication in accordance with the licence terms. You must keep intact the copyright notice and attribute the State of Queensland as the source of the publication. Note: Some content in this publication may have different licence terms as i
3、ndicated. For more information on this licence, visit http:/creativecommons.org/licenses/by/3.0/au/deed.en Contents INTRODUCTION .1 Developing a Business Continuity Plan .1 BUSINESS CONTINUITY PLAN.1 Distribution List.1 References and related documents.1 SECTION 1.1 Executive Summary (optional).1 Ob
4、jectives.1 Glossary.1 SECTION 2.1 Risk Management Planning.1 Insurance.1 Data security and backup strategy .1 SECTION 3.1 Business Impact Analysis .1 Business Impact Analysis.1 SECTION 4.1 Incident Response Plan.1 Immediate Response Checklist.1 Evacuation Procedures.1 Emergency kit.1 Roles and Respo
5、nsibilities.1 Key Contact Sheet.1 Event Log.1 SECTION 5.1 Recovery.1 Recovery Plan .1 Incident Recovery Checklist .1 Recovery contacts.1 Insurance claims.1 Market assessment.1 SECTION 6.1 Rehearse, Maintain and Review.1 Training schedule .1 Review schedule.1 Introduction The purpose of developing a
6、Business Continuity Plan is to ensure the continuation of your business during and following any critical incident that results in disruption to your normal operational capability. This guide will assist you to undertake a Risk Management Plan and Business Impact Analysis, and create Incident Respon
7、se and Recovery Plans for your business. Developing a Business Continuity Plan This template incorporates the Prevention, Preparedness, Response and Recovery (PPRR) framework. Each of the four key elements is represented by a part in the Business Continuity Planning Process. Prevention - Risk Manage
8、ment planning -Incorporates the Prevention element that identifies and manages the likelihood and/or effects of risk associated with an incident. Preparedness - Business Impact Analysis -Incorporates the Preparedness element that identifies and prioritises the key activities of a business that may b
9、e adversely affected by any disruptions. Response Incident Response planning -Incorporates the Response element and outlines immediate actions taken to respond to an incident in terms of containment, control and minimising impacts. Recovery - Recovery planning -Incorporates the Recovery element that
10、 outlines actions taken to recover from an incident in order to minimise disruption and recovery times. We have also included a section titled Rehearse, Maintain and Review, which encourages you to test, regularly review and update your Business Continuity Plan to ensure that your staff are familiar
11、 with it, and that it reflects your changing business needs. Business operators should use the following template as a guide to developing a Business Continuity Plan. Customise it to suit your business needs. The blue sample text is there to guide you and can be deleted after you have completed the
12、template. Remember to save your document. Insert Your Business Name Business Continuity Plan Date: _ Distribution List To assist in updating and revising the plan, an up-to-date list of all plan locations and persons supplied with a copy of the plan should be included. NameLocation 001 002 003 004 0
13、05 006 References and related documents Include all documents that have a bearing on your Business Continuity Plan. Document Title Section 1 Executive Summary (optional) An executive summary is the plan in miniature (usually one page or shorter). It should contain enough information for a reader to
14、get acquainted with the plan without reading the full document. Depending on the size of your business and the length of your document, you may choose not to include an executive summary. Objectives Objectives serve as a means of clarifying the purpose of your plan and should describe the intended r
15、esult. An example of plan objectives are listed below: The objectives of this plan are to: undertake risk management assessment define and prioritise your critical business functions detail your immediate response to a critical incident detail strategies and actions to be taken to enable you to stay
16、 in business review and update this plan on a regular basis. Glossary This table provides a consistent and commonly agreed set of definitions for terms used in the plan. You should customise this list to suit your business. Business Continuity Planning a process that helps develop a plan document to
17、 manage the risks to a business, ensuring that it can operate to the extent required in the event of a crisis/disaster. Business Continuity Plan a document containing all of the information required to ensure that your business is able to resume critical business activities should a crisis/disaster
18、occur. Business Impact Analysis the process of gathering information to determine basic recovery requirements for your key business activities in the event of a crisis/disaster. Key business activities those activities essential to deliver outputs and achievement of business objectives. Recovery Tim
19、e Objective (RTO) the time from which you declare a crisis/disaster to the time that the critical business functions must be fully operational in order to avoid serious financial loss. Resourcesthe means that support delivery of an identifiable output and/or result. Resources may be money, physical
20、assets, or most importantly, people. Risk Managementis the process of defining and analysing risks, and then deciding on the appropriate course of action in order to minimise these risks, whilst still achieving business goals. Section 2 Risk Management Planning You need to manage the risks to your b
21、usiness by identifying and analysing the things that may have an adverse effect on your business and choosing the best method of dealing with each of these identified risks. The questions to ask yourself are: What could cause an impact? How serious would that impact be? What is the likelihood of thi
22、s occurring? Can it be reduced or eliminated? An example is provided in the following table for you. Risk Management Plan Prepared by.:Date: Reviewed by: . Date: Key: VH=Very High H=High M=Medium L=Low Risk Description: Likelihood Impact Priority Preventative ActionContingency Plans Interruption to
23、production processes -breakdown of key plant and equipment -damage to plant and equipment (e.g. fire) LVHHensure adequate insurance cover in place including business interruption and general property set up agreement with suitable supplier for 24 hour repairs and replacement for key plant and equipm
24、ent source alternative production site (if location and equipment have been damaged) immediate access to personal resources whilst waiting for insurance payments BurglaryHHHensure adequate insurance cover in place including business interruption and general property including theft install alarm and
25、 video surveillance camera keep a list of sources for replacement property/equipment . Insurance As part of your risk management plan you need to determine what types of insurance are available and put in place the insurance your business needs. Insurance typePolicy coveragePolicy exclusionsInsuranc
26、e company and contact Last review datePayments due Business InterruptionBusiness interruption due to: fire flood theft terrorism tsunami landslide XYZ Insurance, A Person Ph: 07 3000 0000 00/00/00Amount you pay and frequency. e.g. Monthly, yearly Data security and backup strategy How have you protec
27、ted your data and your network (e.g. virus protection, secure networks and firewalls, secure passwords and data backup procedures)? Detail your backup procedures in the table below. Data for backupFrequency of backupBackup media/ servicePerson responsibleBackup procedure steps Customer databaseWeekl
28、yExternal hard driveA Person Remove external drive from fire safe Copy data from Customer database Return external drive to fire safe Section 3 Business Impact Analysis As part of the Business Continuity Plan business owners should undertake a Business Impact Analysis which will use the information
29、in your Risk Management Plan to assess the identified risks and impacts in relation to critical activities of your business and determine basic recovery requirements. Critical activities may be defined as primary business functions that must continue in order to support your business. You need to id
30、entify: your critical business activities what the impact to your business would be in the event of a disruption how long could your business survive without performing this activity. As part of your Business Impact Analysis you should assign Recovery Time Objectives (RTO) to each function. The RTO
31、is the time from which you declare a crisis/disaster to the time that the critical business function must be fully operational in order to avoid serious financial loss. The following questions may assist you to determine your critical activities. 1.In the following table, list the business activitie
32、s that must be performed to ensure your business continues to operate effectively. If you have a number of business units/departments, complete one table for each. 1Production services 2 3 4 2.For each business activity listed above, complete the following: Business Activity Name: Production Service
33、s Business Activity Description: Production of customised widgets for individual customer orders. a)What are the losses if this business activity could not be provided? Loss of Revenue: $7,500 per week Increased Costs: $N/A Staffing: Production staff numbers will need to be reduced. Product/service:
34、 Number of widgets available for sale will be reduced until production resumes. Fines or penalties due to missed deadlines: N/A Legal liability, personal damage, public harm: N/A Loss of good will, public image: Will occur if unable to meet current client orders. Comments: Current stocks will meet d
35、emands for up to 2 weeks. b)For what maximum amount of time could this business activity be unavailable (either 100% or partial) before the losses would occur? _ hrs _days 2 weeks _months Comments: If stock is not produced for more than 2 weeks the business will lose sales and customers will source
36、alternative widget manufacturer. c)Does this activity depend on any outside services or products for its successful completion? NO YES If yes, check one of the following: Sole Supplier Major Supplier Many Alternate Suppliers Comments: If production is lost, standing order with the supplier will need
37、 to be adjusted to prevent build-up of excess widget material. d)On a scale of 1 to 5 (1 being the Most Important, 5 being the Least Important), where would this business activity fall in terms of being important to the operation of your department or business? - 1 - 2 - 3 - 4 - 5 Comments: Widgets
38、production is the primary activity of the business. Completed By: _Date: _ Business Impact Analysis Critical Business Activity DescriptionPriorityImpact of loss (describe losses in terms of financial, staffing, loss of reputation etc) RTO (critical period before business losses occur) Production servicesProduction of customised widgets for individual customer orders. Highreduced $7,500 revenue per week build up of stock and inventory related to slow down in orders for design and production services customers will source alternate suppliers unable t