GTAG 10 - Business Continuity Management
Download (members only): PDF, 1.65 MB; French (792KB)
Purchase from The IIA Research Foundation Bookstore
Rate this guide

This GTAG focuses on how business continuity management (BCM) is designed to enable business leaders to manage the level of risk the organization could encounter in the case of a natural or man-made disruptive event that affects the extended operability of the organization.

Although most executives are likely to agree that BCM is a good idea, many will struggle to find the budget necessary to fund the program as well as an executive sponsor that has the time to ensure its success. Business Continuity Management will help the CAE communicate business continuity risk awareness and support management in its development and maintenance of a BCM program.

The guide includes:

• Disaster recovery planning for continuity of critical information technology infrastructure, and
• Business application systems.

TABLE OF CONTENTS
1. Executive Summary
2. Introduction
2.1 BCM Definition
2.2 Crisis Management Planning
2.3 Disaster Recovery of IT
3. Building a Business Case
4. Business Risks
4.1 Common Disaster Scenarios
4.2 Common Disaster Impacts
5. BCM Requirements
5.1 Management Support
5.2 Risk Assessment and Risk Mitigation.
5.3 Business Impact Analysis
5.4 Business Recovery and Continuity Strategy
5.5 Disaster Recovery for IT
5.6 Awareness and Training
5.7 Maintenance of the BCM Program
5.8 Exercise of the Business Continuity
5.9 Crisis Communications
5.10 Coordination with External Agencies
6. Emergency Response
7. Crisis Management
8. Conclusion/Summary
9. Appendix
9.1 Sample BCP Audit Guide
9.2 BCM Standards and Guidelines
9.3 BCM Capability Maturity Model

Authors
David Everest, Key Bank : : Roy E. Garber, Safe Auto Insurance Company
Michael Keating, Navigant Consulting : : Brian Peterson, Chevron Corporation

Questions for the authors about this guide? E-mail guidance@theiia.org.