Building Capabilities…

CONSULTING AND TRAINING

BUSINESS CONTINUITY
SOLUTIONS
MANAGEMENT SYSTEM IMPLEMENTATION
(AS PER ISO 22301: 2019 REQUIREMENTS)

… Improving Triple Bottom Line Performance

Confluence Center for Sustainable Development and Business Excellence

Suite # 307, 3rd Floor, Pavani Anasuya Towers, 12-13-197, Street No 1, Tarnaka, Hyderabad – 500017, Telangana, India
 BUSINESS CONTINUITY
MANAGEMENT SYSTEM IMPLEMENTATION
…Promising Healthy and Safe Workplace
What is Business
Continuity?
Recent natural calamities and global
Business continuity is the
capability of an organization
pandemic of COVID-19 has revealed how
to continue the delivery of fragile many of our systems are and now
products and services businesses are focusing on organization
within acceptable time resilience —a concept which helps in building
frames at predefined organization’s capacity to absorb stress,
capacity during a disruption. recover critical functionality, and thrive in
unsual, uncontrolled circumstances created by
Success Factors for effective BCMS factors such as economic, social,
✓ Top Management involvement and accountability environmental, manmade and others.
✓ Creating awareness about business continuity
✓ Training and imparting skills related to information ISO 22301:2019 is one of the security and
security resilience standard from ISO table, adopting
✓ Allocation of necessary resources which will help organizations in developing
✓ Creating and sensitizing all towards handling business continuity appropriate to the amount
emergencies and type of impact that the organization may
✓ Strategic alignment of BCM policies or may not accept following a disruption.
✓ Risk based thinking

Few Facts about Business Continuity and Organization Resilience

According to a survey by Gartner in Mar-2020,

• Just 12% of more than 1,500 respondents believe their businesses are highly prepared for the impact of
coronavirus.
As per CNN study,
• On average, businesses lose over $100,000 per ransomware incident due to downtime and recovery costs.
Touche Ross in a study in 2017 revealed that
• 93% of companies without Disaster Recovery who suffer a major data disaster are out of business within one
year
• By 2021, cybercrimes will cost $6 trillion per year worldwide

As per Institute of Chartered Accountants in England and Wales, in May 2017 a power outage that disabled much of
British Airways’ global IT infrastructure led to the cancellation of more than 700 flights, leaving about 75,000 people
stranded in airports across the globe over the course of three days. The following month, the airline announced that
the incident had cost the company about £80m in lost revenue, rebooking, accommodation and compensation
payments.
Source: Information published on Websites of Gartner, CNN, Touche Ross and ICAEW

Confluence Center for Sustainable Development and Business Excellence 2

 BUSINESS CONTINUITY
MANAGEMENT SYSTEM IMPLEMENTATION
…Promising Healthy and Safe Workplace
Main Elements of BCMS
based on
ISO 22301: 2019 Main Aim of the Standard
❑ Organization Context
❑ Leadership and Specify the structure and
Commitment requirements for
❑ Risk Based Thinking implementing and maintaining
❑ Resource provision Importance of Sustainable Development: a business continuity
❑ Business continuity management system (BCMS)
Most of the MNCs and Fortune 500 Companies across that develops business
plans and
the globe are publishing their sustainability reports to continuity appropriate to the
implementation amount and type of impact
❑ Employee demonstrate their commitment towards improving
that the organization may or
Engagement environmental and social performance over and may not accept following a
❑ Continual above their financial performance. As part of the disruption.
Improvement sustainability principles, the same is also being
expected from their supply chains/ service providers.

EMPHASIS OF BCMS:
• Understand the organization’s needs and the necessity for establishing business continuity policies and
objectives.
• Operating and maintaining processes, capabilities, and response structures for ensuring that the
organization will survive disruptions.
• Monitoring, reviewing and continually improving the BCMS performance.

Benefits of BCMS:
Purpose of BCMS is to prepare for, provide and maintain controls and
capabilities for managing an organization’s overall ability to continue to operate
during disruptions. In achieving this, the organization is
• supporting its strategic objectives
• creating competitive advantage
• protecting and enhancing its reputation and credibility
• contributing to organizational resilience

In addition, organizations adopting, implementing and maintaining a BCMS will

From a financial perspective
• reduce legal and financial exposures, reducing direct and indirect costs of disruptions.
From the perspective of interested parties
• protecting life, property and the environment, considering the expectations of interested parties and providing
confidence in the organization’s ability to succeed.
From an internal processes perspective
• improve its capabilities to remain effective during disruptions, demonstrate proactive control of risks effectively
and efficiently and addressing operational vulnerabilities.

Confluence Center for Sustainable Development and Business Excellence 3

 BUSINESS CONTINUITY
MANAGEMENT SYSTEM IMPLEMENTATION
…Promising Healthy and Safe Workplace
Business Continuity
Vs Resilience
Business Continuity is Other BCMS Related Standards and Guidelines:
essentially returning a ISO Standards related to security and resilience includes
ISO 22301: 2019 Structure the following:
business to 'business as
4. Context of Organization ISO 22301: 2019 – Business continuity management
usual' level within time.
5. Leadership and worker participation systems — Requirements
Organizational resilience ISO 22313: 2020 – Guidance on the use of ISO 22301
6. Planning
refers to an organization’s ISO 22316: 2017 – Organizational resilience — Principles
7. Support
ability to absorb and adapt 8. Operation and attributes
in a changing environment. 9. Performance Evaluation ISO/ TS 22317: 2015 - Guidelines for business impact
10.Improvement analysis
ISO/ TS 22330: 2018 – Guidelines for people aspects of
business continuity
ISO/ TS 22331: 2018 - Guidelines for business continuity
strategy

Purpose of ISO 22301: 2019 -

ISO 22301: 2019 is a standard that provides requirements or guidelines for organizations to develop and
systematically manage their policies, processes and procedures in order to achieve their business continuity
objectives and provide confidence to their customers regarding their ability to continue the services during
disruptions.

How Confluence Can Help

Stage Activities Duration

Stage 1
Project Kickoff and Initial Assessment
1 Week Confluence partners with client organizations in
(To create a buy-in for BCMS among the key personnel) terms of helping them build internal capabilities
Risk Assessment to manage the business continuity effectively:
(Train Core Team to build internal capabilities on Operational/
Stage 2 2 Weeks ❑ Assessing the maturity of As-Is Practices
Continuity Risk Management and identify the risks associated
with operations) and the infrastructure facilities
Formulation of Business Continuity Policy, Objectives & Targets including critical elements of business
Stage 3 (Establishing Policy, Objectives and Targets in line with strategic 1 Week ❑ Determine business continuity risks
objectives of the organization) ❑ Determine the To-Be Practices based on
BCMS Documentation and Training the business continuity risks
(standardize and institutionalize the practices in the ❑ Facilitate establishing and
Stage 4 2 Weeks
organization in line with the requirements of the standards and
organization’s policy)
implementing the To Be Practices
❑ Establish Metrics and criteria for
Planning and Preparation for effective BCMS Implementation
(Business Continuity Planning and implementation of managing the business continuity
Stage 5 2 Weeks
management programs, testing the plans and operational aspects of operations
controls to achieve the objectives and targets) ❑ Improve the Practices
Establishment BCMS Audit and Review System ❑ Establish Governance Practices for
(Build internal capabilities within the organization to conduct ensuring effective implementation of
Stage 6 10 Weeks
internal audits and management reviews and also handhold to
carry out at least one round of audit and management review) Business Continuity Management
Certification
System.
(To get the BCMS assessed by an reputed third party accredited
Stage 7 6 Weeks
certification body and achieve certification against ISO 22301:
2018)
Total Duration 24 Weeks

Confluence Center for Sustainable Development and Business Excellence 4

 Profile of Confluence

• Confluence Center for Sustainable Development

and Business Excellence is one of the
pioneering organizations to provide integrated
sustainable development services.

• We are a Management, Process, Engineering

Consulting and Training Services Company
backed by Leadership Team with 100+ years of
industry experience between them.

To know more details or way forward to know how we can add value to organization,

Contact:

Venkatesh Yerramalla
Mobile: +91 9848043413 | yerramalla@confluenceworld.com

Naveen Damaraju
Mobile: +91 9000800226| naveen@confluenceworld.com

“Perfection is unattainable,
but if we chase it,
we can achieve Excellence
- Vince Lombardi

Our India Office:

Corp. Office: Suite # 307, 3rd Floor, Pavani Anasuya Towers, 12-13-197, Street No 1, Tarnaka, Hyderabad – 500017, Telangana, India
URL: www.confluenceworld.com | E-mail: info@confluenceworld.com | Tel: +91 40 27007723
Ver 2.0/ 01-May-2020

Confluence Center for Sustainable Development and Business Excellence 5