Presented by:

Virtual
Corporation

The Business Continuity Maturity Model

sustainable planner
business continuity
professional consulting

2016 Virtual Corporation

What is Business Continuity?

A proactive process identifying
& prioritizing critical business
functions & the likely threats to
those functions.

2016 Virtual Corporation

BC plans & procedures

are developed through a
regular program of
personnel training, plan
testing & maintenance

These management disciplines,

processes & techniques provide
business continuity of the critical
business functions under
the circumstances &
within limits set by
senior management.

These circumstances & limits

include:

1. Defined scope & framework

of a sustainable BC
Program approved funding
2. Staffing of the company's
BC Program

2016 Virtual Corporation

What is Business Continuity?

The Business Continuity Program Life Cycle
Incident Occurs
Normal Operations

Capability

Recovery
Time
Objective
Emergency Response

Recovery

Return to
Normal Operations

Restoration

Acceptable Business Capability

Proactive BCM Activities

Reactive BCM Activities

Proactive BCM Activities

Prevention and Preparedness

Risk Avoidance / Mitigation / Acceptance

Response,
Recovery & Restoration

Prevention and Preparedness

Risk Avoidance / Mitigation / Acceptance

Time

2016 Virtual Corporation

Plans Within a Business Continuity Plan

Saves lives & protects assets

Conduct damage assessment
Site Emergency Operations Center (EOC)

Crisis Management Plan

Enterprise Crisis Management Center

(ECMC)
Multiple EOC Activations
Command, Control & Communication

Ensure that critical functions continue to be

performed
Departmental Recovery Plans
Requires EOC communications &
authorizations

Disaster Recovery Plan

Site Operations & Physical

Infrastructure
Ensure critical technical & operational
infrastructure is available
Alternate site recovery

Restoration Plan
Risk Mitigation Plan

Business Recovery Plan

Emergency Response Plan

Tasks to initiate mitigation

action (s)
Avoid or minimize disruption

A plan to return to normal

operations

2016 Virtual Corporation

Business Continuity Management

6 Plans - Working Together
** Mitigation Action Plan may allow organization to avoid disruption. **

Incident Occurs

Crisis Management Plan Activated

Normal

Normal
Emergency Response &
Damage Assessment

Operations

Preparing for
Recovery of Critical
Operations

Operating in
Recovery Mode

Implement
Restoration
Plan

Operations

Acceptable Business Capability

Disaster Recovery Plan Activated

Time

Hour
0

Recovery
Begins

Recovery
In Place

Restoration
Begins

Back to
Normal

Emergency Response Plan

Business Recovery Plan

Crisis Management Plan

Disaster Recovery Plan

Risk Mitigation Plan

Restoration Plan

2016 Virtual Corporation

Questions the BCMM answers

Where are we now?

Where do we ultimately
want to be?

What steps do we take

to get there?

CRITICAL TO SUCCESS:
Achieve executive buy-in

2016 Virtual Corporation

Why the Business Continuity Maturity Model

Generate consistent data from which meaningful
benchmark analyses can be drawn:

12 3

Establish standard
means of scoring BC
program
implementations

Develop historical
databank tagged in
meaningful ways, e.g.,
by industry, by region,
by company size, etc.

Generate awareness
that business
continuity program
effectiveness can be
quantified

2016 Virtual Corporation

BCMM is a diagnostic tool for objective

evaluation of your BC program effectiveness

Generate consistent &

repeatable
measurements of the
current state-ofpreparedness

Conduct accurate &

reliable analyses to
identify gaps in BC
program
implementation

Propose demonstrable
& justifiable actions to
maximize program
effectiveness &
resource utilization

2016 Virtual Corporation

The Business Continuity Maturity Model

2016 Virtual Corporation

The Business Continuity Maturity Model

Leadership
The commitment & understanding
demonstrated by executive
management regarding the
implementation of a scaled,
enterprise-wide business continuity
program. The degree to which the
business case has been articulated
& understood.

2016 Virtual Corporation

The Business Continuity Maturity Model

Employee BC Awareness
The breadth & depth of business
continuity conceptual awareness
throughout all staff levels of the
organization.

2016 Virtual Corporation

The Business Continuity Maturity Model

BC Program Structure
The scale & appropriateness of
the business continuity program
implemented across the
enterprise. The degree to which
the BC Program matches the
articulated business case.

2016 Virtual Corporation

The Business Continuity Maturity Model

Program Pervasiveness
The level of business continuity
coordination between
departments, functions & business
units. The degree to which business
continuity considerations have
been incorporated in other
business initiatives / programs.

2016 Virtual Corporation

The Business Continuity Maturity Model

Metrics
The development & regular reporting of
quantifiable criteria used to monitor the
BC Program performance. The
establishment of a baseline & on-going
tracking of established business
continuity competency goals.

2016 Virtual Corporation

The Business Continuity Maturity Model

Resource Commitment
The application of sufficient,
properly trained and supported
personnel, financial and other
resources to ensure the
sustainability of the BC Program.

2016 Virtual Corporation

The Business Continuity Maturity Model

External Coordination
Coordination of business
continuity issues & requirements
with external community
including customers, vendors,
government regulatory bodies,
unions, local 1st responders.
Insure that critical supply chain
partners have in place adequate
BC Programs of their own.

2016 Virtual Corporation

The Business Continuity Maturity Model

BC Program Content
Business Continuity Disciplines
The degree & quality of
implementation of each of the four
central disciplines of BC:

1. Incident Management
2. Technology Recovery
3. Business Recovery
4. Security Management

2016 Virtual Corporation

Feedback From BCMM Users

Executive
Buy-in

Supply Chain
Vulnerability

Self
Assessment

BCMM

Program
Design

Regulatory
Compliance
Evaluation
Framework

2016 Virtual Corporation

BCMM Score Card Sample

Corporate Competencies
Leadership
Employee Awareness
BC Program Structure
Program Pervasiveness
Metrics
Resource Commitment
External Coordination

3.8
3.3
4.0
4.2
3.7
4.2
3.8
3.6

BC Program Content
Incident Management
Technical Recovery
Security Management
Business Recovery

3.7
4.1
4.1
3.5
3.2

Total Score

3.8

2016 Virtual Corporation

BCMM Proprietary Tool

Proprietary Model provides:
A standardized methodology that is
consistently applied.
A diagnostic tool for objective evaluation
of business continuity program
effectiveness.
Consistent data from which meaningful
benchmark analyses could be drawn

Assessment Score Card provides:

Consistent reporting format
Comprehensive data presentation
Comparative data

2016 Virtual Corporation

About Virtual Corporation

Our offerings include:
Business impact analysis (BIA)
Site vulnerability assessments
Crisis management
Incident command exercise
Continuity program design &

implementation
IT disaster recovery
BCMM assessments & training
Resiliency facilitation & planning

Virtual Corporation is a leading implementer of

enterprise resiliency & continuity programs.

2016 Virtual Corporation

www.virtual-corp.net

2016 Virtual Corporation