Company Strategy to handle Business Continuity

Introduction

Now that we understand what ITSCM is, we need to understand how to prepare and respond to a disaster event. Let´s start with the Key Threads to understand what can affect the ability of our company to overcome the disaster. Afterwards we follow key preparation tasks. ITSCM is a top management driven activity and can not be managed bottom up.

  • Denial of access to premises (Offices, Data-Centres, Distribution centres)
  • Loss of Staff due to:
    • Resignation
    • Sickness
    • Fear
    • Children safeguarding and homeschooling
    • Use of personnel for Governmental purposes (Army, Fire Department, Hospitals, etc..)
  • Transportation breakdown
    • No transportation of people (Trains, Planes)
    • No transportation of goods (Ships stopped in harbours, no plan capacity)
  • Availability of technical parts
    • Access to repair parts
    • Access to IT End-user Devices (Laptops, Phones, PCs, Thin clients, etc…)
  • Power breakdown
    • Limited runtime of battery powered infrastructure
    • Limited availability of fuel for generators

General Process

Figure 1: General Process

Detailed Process

Figure 2: The service relationships and dependencies

  • Now that we understand, how a company defines the requirements to the ITSCM Process, we can take the next step and outline the main Activities of the ITSCM process.
  • The following ITIL picture is an essential one, as it shows all activities very well aligned to the different phases which will be detailed further in the Continuity process guidance.

Figure 3: Lifecycle of IT service continuity management

Business continuity management (BCM)

(ITIL Service Design) The business process responsible for managing risks that could seriously affect the business. Business continuity management safeguards the interests of key stakeholders, reputation, brand and value-creating activities. The process involves reducing risks to an acceptable level and planning for the recovery of business processes should a disruption to the business occur. Business continuity management sets the objectives, scope and requirements for IT service continuity management.

IT service continuity management (ITSCM)

(ITIL Service Design) The process responsible for managing risks that could seriously affect IT services. IT service continuity management ensures that the IT service provider can always provide minimum agreed service levels, by reducing the risk to an acceptable level and planning for the recovery of IT services. IT service continuity management supports business continuity management.

Business impact analysis (BIA)

(ITIL Service Strategy) Business impact analysis is the activity in business continuity management that identifies vital business functions and their dependencies. These dependencies may include
suppliers, people, other business processes, IT services etc. Business impact analysis defines the recovery requirements for IT services. These requirements include recovery time objectives, recovery point objectives and minimum service level targets for each IT service.

Vital business function (VBF)

(ITIL Service Design) Part of a business process that is critical to the success of the business. Vital business functions are an important consideration of business continuity management, IT service
continuity management and availability management.