The Importance of Exercises in Your Business Continuity and Crisis Management Programs B3

Transcription

1 The Importance of Exercises in Your Business Continuity and Crisis Management Programs B3 Monday, June 9 11:30 am Joe Flach Safe Harbor Consulting

2 Session Agenda Introductions Why Exercise? The Test The Exercise The Drill The Assessment The Traditional BCP Methodology Adjusting the BCP Methodology Questions and Answers Let s Eat Lunch!!

3 Introductions

4 The Old Adage We don t test we exercise. Testing implies pass/fail; Exercising implies getting stronger. We exercise our programs to get stronger.

5 Reasons for Conducting an Exercise Validate that it works the Test Educate people on how it works Training Find opportunities to improve the Exercise Expand the number of people who can work it Make us better at working it the Drill Measure our current abilities the Assessment

6 The Test Validate that the strategies will work Limit the number of participants Use your experts Detailed Planning Develop Success Criteria Acceptance tests with vendors

7 Training Introduces strategies and solutions Explains roles and responsibilities Communicates assumptions and givens More of a structured session Lots of handouts and take-aways Facilitator does most of the talking You have to be taught how to use the equipment before you can start to exercise with it.

8 The Exercise The expectation is the people should know what to do The goal is to see how well they do it The objective is to discover opportunities to improve the process and the solutions Exercise your plans as well The Facilitator should do little talking Delicate balance between being challenging vs. being reasonable

9 The Exercise The true measure of success with any Exercise is realized in the execution of the next exercise: If you discover the same weaknesses and shortcomings, your exercise was a failure. If you improved your program and discover new opportunities for improvement, your exercise was a success.

10 The Drill The objective of a drill is to repeat a process or task over and over again until it becomes second nature. Plans are important, but you should strive to create an environment where you do not rely on the plans. Drill those things that are most important and/or most likely to occur.

11 The Assessment The quickest way to discover an organization s current recovery posture is to conduct an Exercise. Should be the starting point in the development of any new program. Helps discover current capabilities, current shortcomings and management expectations and priorities.

12 The Traditional BCP Methodology

13 Adjusting the BCP Methodology Exercises can be used to: Help identify Business Impacts Highlight the Risks that exist Establish Management Priorities Influence the Solutions and Strategies Measure our Starting Point Gain Acceptance for the Planning Process Exercises should be the CORE of our Methodology, utilized throughout the Lifecycle to help keep us on the right path, keep management engaged and remain consistent with expectations.

14 Exercise Tips Determine your goals and objectives before: Deciding what type of exercise to conduct Selecting the scenario to exercise Know your audience Document your success criteria ahead of time Take it one step at a time Don t Facilitate if you Participate Stay focused and stay on schedule

15 Exercise Tips Make your scenarios realistic and relevant Keep it pragmatic and practical Engage your audience Share your findings and results Get Feedback Create Evaluation Forms Reward your participants

16 Common Mistakes Full-scale exercises before validating component parts Focusing too much on the scenario and not enough on the program Repeating problems from past exercises Rigging the exercise to succeed Over-preparing Failing to capture Lessons Learned

17 Common Mistakes Failing to follow-up on Lessons Learned Using the same players over and over Over-Exercising / Under-Exercising Too long / too short

18 Other Considerations Scheduled or un-scheduled Table-top or simulation Include: Observers Partners Outsiders Get outside help in preparing and facilitating

19 Questions and Comments

20 Thank You Safe Harbor Consulting (253) Gig Harbor, WA