Business Continuity Management

Business continuity management and resilience are critical to maintaining a healthy business, but many organizations either do nothing (leaving themselves exposed to disruption), take short cuts (leaving major gaps) or fail to properly engage senior stakeholders. This book is a straightforward guide to delivering an effective business continuity capability, including practical ...

(展开全部)

Business continuity management and resilience are critical to maintaining a healthy business, but many organizations either do nothing (leaving themselves exposed to disruption), take short cuts (leaving major gaps) or fail to properly engage senior stakeholders. This book is a straightforward guide to delivering an effective business continuity capability, including practical solutions built from the author's personal experience managing hundreds of projects in a variety of business settings.

Business Continuity Management compares incident management, crisis response and business continuity and how to explain their importance to senior decision makers to ensure appropriate investment. Readers will benefit from case studies of organizational crises and disruptions, including Home Depot, Nissan, RBS, Facebook, Equifax and KFC, and an exploration of lessons learned from the COVID-19 pandemic. With key performance indicators, templates and checklists covering planning, response, reporting and assurance, this book is the essential reference for business continuity and resilience which can be tailored to any organization.

James Crask has worked in the resilience field since 2003. He currently leads the Business Resilience Advisory practice at Marsh, a global risk management advisory and insurance brokerage business. His work here involves supporting organizations in numerous industry sectors to build their resilience arrangements. This includes working with some of the world’s largest food and c...

(展开全部)

James Crask has worked in the resilience field since 2003. He currently leads the Business Resilience Advisory practice at Marsh, a global risk management advisory and insurance brokerage business. His work here involves supporting organizations in numerous industry sectors to build their resilience arrangements. This includes working with some of the world’s largest food and consumer goods companies to implement global resilience programmes, multinational financial services organizations, critical infrastructure operators and technology and media businesses.

Previous roles have included working as the head of risk management for the BBC and a similar role at the UK Nuclear Decommissioning Authority, which is responsible for the safe decommissioning of the UK’s fleet of civil nuclear sites. He also spent many years working for PwC leading the UK firm’s enterprise resilience advisory services and advising companies in a wide range of industrial sectors.

Prior to his consulting roles, James worked in the UK Cabinet Office supporting government ministers and the British prime minister to prepare plans for national disasters. In this role he also supported the response to national crises as part of the UK Government’s crisis response machinery known as COBR.

James also chairs the International Organization for Standardization (ISO) panel that is responsible for all global business continuity and organizational resilience standards. It is this committee that publishes ISO 22301, ISO 22313, ISO 22316 (organizational resilience) and other related standards.

1 引言
业务连续性和韧性
业务连续性介绍
高效韧性专业人员的品质和技能
迈出第一步
第一部分 核心原理
· · · · · · (更多)

1 引言
业务连续性和韧性
业务连续性介绍
高效韧性专业人员的品质和技能
迈出第一步
第一部分 核心原理
2 韧性的演化
业务连续性的局限和韧性的诞生
监管机构认识到韧性的重要性：英国经验
通往韧性的旅程和挑战
3 相关国际标准
韧性标准简史
管理体系标准
认可认证过程
标准的常见陷阱
如何使用标准
4 不同行业业务连续性和韧性的差异
组织特征
准备开始
5 事件管理、危机管理和业务连续性比较
国际和欧洲标准中的定义
定义事件
什么时候事件变为危机
定义扰乱
扫视可能的事件、危机和扰乱
6 危机应对良好实践
为什么好的危机应对很重要？
好的实践什么样？
良好危机应对的基本构件
决策周期
危机沟通
总结，回顾和经验教训
7 新冠疫情的经验教训
从“别人的问题”到“自己的战场”
人员和技术挑战
经验教训
走向未来
第二部分 有效业务连续性能力的交付指导
8 赢得并保持董事会的关注
第一步
董事会和高管层的需求有何不同？
关键的高管层相关方
参与度因行业而异
准备并做好宣传
保持兴趣
与难搞的高层相关方打交道
9 完善治理和落实资源
好的治理是什么样？
项目治理和常规治理的区别
危机如何影响治理
高效治理机制的构成
维护称职的人力资源
10 业务影响分析和确定恢复策略
BIA过程
先决条件
定义影响准则
确定关键活动
整合输出
交付方法
风险评估
恢复策略和解决方案
将策略转化为解决方案
11 编写计划和程序
计划类型
计划的主要内容
格式和内容
通用计划内容
计划维护
12 培训和演练
培训对象
确定培训频度
培训后跟进
演练
演练实施建议
13 供应链韧性
为什么供应链韧性很重要？
准时制与供应深度(depth of supply)
评估风险
确定恢复选项
当前供应商与新供应商
事件后
14 评审、审计和改进
评审的收益，以及为什么不用担心审计拜访
保障和三道防线
绩效指标和成熟度模型
规划和能力
不同类型的评审
采取行动，改进
第三部分 模板和检查表
15 预案内容和编制建议
16 响应模板
17 业务连续性管理评分表
· · · · · · (收起)