Defining a Business Continuity Plan
Creating or Duplicating a Business Continuity Plan
A Business Continuity Plan must necessarily be created from a Business Impact Analysis.
You can either create a BCP or duplicate an existing BCP.
To create a Business Continuity Plan:
2. In the properties of a BIA, select the Continuity Plans page.
3. Click New.
4. Enter a name and click OK.
If a PCA exists for the process, you can choose to:• Create a Business Continuity Plan from scratch
• Duplicate a Business Continuity Plan
Specifying the Business Continuity Plan Characteristics
BCP general characteristics
The following characteristics are displayed in the BCP properties:
• BIA connected
• Status
• Ongoing
• Archived
• Entity: entity of the BCM System the Business Continuity Plan applies to.
• Process: the process of the Business Continuity Plan scope
• Validity dates (Valid From and Valid Until)
Additional sections enable to define:
• a Risk Scenario as well as the risks that might trigger the BCP.
A risk scenario corresponds to a risk type.• Unavailable resources in the event of a crisis..
Specifying the risks of a BCP
In the Business Continuity Plan properties you may describe a risk scenario and/or specify the triggering risks.
To specify risks and risk types:
2. In the properties of a BCP, expand the Risk scenario section.
3. In the Risk Scenario list, connect one or more risk types (which make up the risk scenario).
4. In the Triggering Risks list, connect one or more risks that might trigger the BCP.
When connecting risks you may choose among:
• all risks
• risks connected to the process
• risks connected to the risk scenario (risk type)
• risks connected to both process and risk scenario
This information enables to describe the origin of the crisis which triggers the BCP.Specifying unavailable resources
In the properties of a Business Continuity Plan you can specify unavailable resources in the event of a crisis:
• Org-Units
• Applications
• Sites
This information enables to explain why a BCP is necessary to ensure business continuity.Defining Continuity Steps
Continuity steps are steps that ensure the process continuity.
They are used to start the degraded mode.
To create a continuity step:
2. In the properties of a Business Continuity Plan, select the Continuity Steps page.
3. Click New.
4. Define a Responsible user.
5. Enter a Description.
Defining a Degraded Mode
A degraded mode enables to ensure business continuity in the event of a crisis.
To initialize a degraded mode, you must have defined continuity steps first. See Defining Continuity Steps.To defining a degraded mode:
1. In the BCP properties, select the Degraded mode page.
2. Click Initialize a degraded mode.
A degraded mode is automatically created.
Its name is automatically generated from the BCP name.
3. (Optional) Specify the Degraded mode process if you want to give more information.
The process can be described in HOPEX Business Process Analysis.4. Specify the Substitute Assets.
• Org-Units
• Applications
• Sites
Defining the Recovery Procedure
Once the business continuity is granted by the degraded mode, you should describe the recovery procedure to go back to business as usual.
A recovery procedure consists of recovery steps necessary to go back to business as usual. The recovery procedure gives birth to an action plan when a crisis is triggered.
The recovery procedure can be considered as an action plan template.To trigger a recovery procedure:
1. In the Business Continuity Plan properties, select the Recovery Procedure page.
2. Click Initialize Recovery Procedure.
A recovery procedure is automatically created.
Its name is automatically generated from the BCP name.
3. Specify:
• the Owner and the Approver of the recovery procedure.
These fileds are similar to the ones found on an action plan.• the estimated Necessary Time.
4. Fill in the Means as well as a Description.
5. Specify the Recovery Steps as well as their sequence.
For each step you may specify:• the estimated required time
• the previous step
• the deliverable
• a description
