BUSINESS CONTINUITY MANAGEMENT FRAMEWORK

BUSINESS CONTINUITY MANAGEMENT (BCM) FRAMEWORK(tm) CD-ROM:
THE EASY-TO-USE, COMPREHENSIVE, BUSINESS CONTINUITY TOOL
NEW - EXPANDED THIRD EDITION (2008)
By Kingswell International, Ltd.

Published by Rothstein Associates Inc.
ISBN #1-931332-43-6

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK(tm) is a comprehensive,
word-processor-driven Business Continuity Management template with extensive
Standards-Driven components reflecting the latest international standards.

=======================================

NEW IN THE 2008 EDITION

- THE ABC’S OF BUSINESS CONTINUITY: A HOW-TO GUIDE WITH ALL
THE
FORMS, CHECKLISTS, EXAMPLES AND TEMPLATES YOU NEED - almost 300
pages!

- 20+ new files and templates.

=======================================

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK represents a new
approach in disaster recovery software tools. The problem with a lost of software is
that it is expensive (typically Ł6,000 - Ł20,000); it requires training in use of the
software; it may require consultancy in its use; it does not necessarily match your
culture, requirements, or documentation standards; and it still requires a lot of
work to complete the detail, without which any disaster recovery plan is worthless.

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK is different. It features
The ABC of Business Continuity Management – A How To Guide: a step-by-step
guide in MS Word format, with all the necessary forms, models and templates to
conduct a successful Business Continuity project through the entire Business
Continuity lifecycle, from Project Initiation, through Risk and Impact Assessment,
Strategy Definition, Plan Development to Review and Testing. It conforms to the
Project Lifecycle recommended by the Business Continuity Institute (BCI) and
Disaster Recovery Institute International (DRII), compatible with British Standards
Institution (BSI) BS 25999: the first national standard for Business Continuity
Management, tipped to become an ISO standard.

In addition, the CD includes many easily tailored modules that are selected from
our database of client work from a combined total of over 150 years of consultancy
experience - modules that are hand-picked as the most relevant to your own
situation, culture, organization, equipment platform and infrastructure. It contains
Model Business Recovery Action Plans for key corporate functions with
Organization Schematics and role descriptions, with some vital - and often
forgotten - actions included. The Appendices cover, among other items:
- Contact List formats
- Control Room set-up
- Disaster Evaluation and Invocation Procedure
- Recovery Time Estimating
- Incident and Damage Reporting formats
- Activity Logs and Action Logging formats
- Vital Materials Lists
- Agenda for Team Leaders' Meeting
- Plan Maintenance: Document Configuration Control structure
- Project plans
- Outline Restoration Procedures
- Plan Testing Strategy
- Plan Testing forms

The appropriate Outline Restoration Procedures may be selected from the best
match with your platforms and environment.

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK offers a structured
approach to achieve a disaster recovery plan for you in the simplest, easiest way.
The plan can be developed in a style and to documentation standards compatible
with your organization's culture and standards. It is important that line
management take ownership of their aspects of the plan, so for your ease of use
and maintenance, BUSINESS CONTINUITY MANAGEMENT FRAMEWORK is
provded in standard Microsoft Word format.

=======================================

WHAT YOU GET

The BUSINESS CONTINUITY MANAGEMENT FRAMEWORK package includes
the numerous documents, models, examples and checklists covering all of the
Business Continuity Institute (BCI) / Disaster Recovery Institute International (DRII)
core competencies and follows British Standards Institution BS 2599 and PAS 77
standards.

The BUSINESS CONTINUITY MANAGEMENT FRAMEWORK package includes:

PROJECT INITIATION & MANAGEMENT

1 Pre-Engagement Form
2 Project Briefing Form
3 Project Information Requirements
4 Project Scoping Considerations
5 Example BC Terms of Reference & Scope
6 Example BC Scope 2
7 Example Simple Project Plan MS Word®
8 Example Policy Statement
9 Bc Oriented Tiers & Site SLA
10 Example MS Excel Project Plan 2
11a Example MS Excel Project Plan 1
11b Example MS Excel Project Plan 1
11c Example MS Excel Project Plan 1
12a Example MS Project Project Plan 2
12b Example MS Project Project Plan 3
12c Example MS Project Project Plan 4
12d Example MS Project Project Plan 5
13 Project Highlight Report
14 Project Report
15 BC Process Flow
16 Presentation – BC Management Briefing
17 BC Coordinator Job Description
18 ERM Consultant ToR (NEW)
19 ToR Risk Management Group (NEW)
20 Example BC Policy Statement 2 (NEW)
21 Example CEO letter (NEW)

RISK & IMPACT ASSESSMENT

0 Risk Management
1 Risk Analysis Checklist
2 Site Risk Assessment (MS Word)
3 Site Risk Assessment (MS Excel)
4 BIA Questionnaire
5 BIA Interview Questionnaire
6 Data Collection Forms
7 BIA Summary
8 Business Interruption Risk Questionnaire
9 Vital Records Categories
10 RA Checklist – H&S, Environmental
11 Fire Assessment Checklist
12 Risk Assessment Form
13 Risk Assessment Report Template
14 Example Risk Rating
15 Example Risk Management Process
16 Example Mail Order BIA
17 RA Format
18 Vital Materials Questionnaire
19 @Risk Example BIA (NEW)
20 Presentation – Cost of Downtime (NEW)
21 Presentation – Marketing Protection (NEW)
22 Presentation – ERM COSO (NEW)
23 Presentation – Risk & BIA (NEW)
24 DMT Chart (NEW)

STRATEGY

1 Strategy Report Example Terms of Reference
2 Example Preface, Strategy Report
3 Example of a Board BC Report

DEVELOPING & IMPLEMENTING BCP

1 Incident Alert Form
2 Example Emergency Policy
3a BC Plan Template - BC Framework
3b BCP Finance
3c BCP Media
3d Media Checklist
3e BCP Office Services
3f BCP Personnel
3g BCP Retail & Logistics
3h BCP Appendices
4 Vendor Checklist
5 Example IT Recovery Site Vendor Specification
6 BCP Software Questionnaire 1
7 BCP Software Questionnaire 2
8 Data Center SLA
9 Data Center M&E Specifications & SLA
10 Charities Disaster Checklist
11 Charities Continuity Planning Template
12 Disaster Plan Pro Forma
13 Example RFP 1 (NEW)
14 Example RFP 2 (NEW)
15 Example RFP 3 (NEW)
16 DR Flowchart (NEW)
17 Presentation – Pandemics & BC (NEW)
18 Presentation – IT DR Plan (NEW)

BCP AUDIT & TESTING

1 Audit
2 Testing – the Case
3 Test Strategy
4 Test Planning Form
5 BC Test Checklist
6 Example Brief for Observers
7 Walkthrough Test Scenario
8 Example Scenario and Sitreps
9 Example Test Report
10 Example Test Report
11 Example Audit Plan

ARTICLES AND PRESENTATIONS FOR BUSINESS CONTINUITY
AWARENESS
1 BC - A Matter for the Board
2 BC & Risk Quality
3 Enterprise Risk Management
4 Brand & Reputation Continuity
5 BC Keeping Customers
6 Data Loss
7 E-com Risk
8 The UK Foot & Mouth Disaster
9 Issues in European Continuity
10 Public Sector Disaster
11 Supplier Risk
12 Turnbull Report
13 Why IT Disaster Recovery isn’t Enough
14 Contractual Arrangements for DR Services
15 Industry Standard Tier Classifications
16 2008 Update Supplement
Presentation 1 BS 25999
Presentation 2 Managing World Class Risk Functions
Presentation 3 BIA & Marketing Protection
Presentation 4 BC – Someone Else's Problem?

BUSINESS CONTINUITY INSTITUTE

1 Special Offer - Business Continuity Institute
2 About BCI
3 Membership Benefits
4 Membership Categories
5 Membership Requirements
6 Membership – Scored Assessments
7 Application Form
8 BCI Good Practice Guide 2007

=======================================

Within each folder, the sequential numbers indicate a logical sequence.

All documents are in Microsoft Word, Excel, Powerpoint, or Project
formats.

=======================================

EXAMPLE CONTENTS OF THE BUSINESS CONTINUITY PLAN

This is an example for a Business Continuity Plan based on the BUSINESS
CONTINUITY MANAGEMENT (BCM) FRAMEWORK.

SECTION 1: OVERVIEW
1.1 Introduction
1.1.1 Known Weaknesses of the Plan
1.1.2 Assumptions
1.1.3 How to Use the Plan
1.2 Scope of the Plan
1.2.1 Base Site Functions and Services Generally
1.2.2 Scope of Plan
1.2.3 Standby Procedures
1.2.4 Services Covered by the Plan
1.2.5 Assumptions
1.3 Structure of the Plan
1.4 Contents of the Plan
1.4.1 Overview, Emergency Management Plan & Business Continuity
Manager's Role
1.4.2 TBD Information Technology Recovery Team: Standby Site
1.4.3 Base Site Team
1.4.4 Damage Assessment & Salvage Team Plan
1.4.5 Logistics Team Plan
1.4.6 Buying & Merchandising Team Plan
1.4.7 Marketing Team Plan
1.4.8 Retail Operations Team Plan
1.4.9 Office Services Team Plan
1.4.10 Finance & Administration Team Plan
1.4.11 Human Resources Team Plan
1.4.12 Media & Public Relations Team Plan
1.4.13 TBD Team Plan
1.5 Organization and Management
1.6 Recovery Teams
1.7 Team Members and Contact Lists
1.8 Standby /Emergency Locations
1.9 Security of the Business Continuity (BC) Plan
1.10 Changes to the Plan
1.11 Distribution of the Plan
Figure 1: Business Continuity Organization & Roles: Overview
(For names and Contacts see Appendix A-1)

SECTION 2: EMERGENCY MANAGEMENT PLAN
2. Emergency Management Plan
2.1 Introduction
2.2 Emergency Management Team
2.3 Staffing and Team Composition
2.4 Standby Locations
2.5 Public Relations
2.6 Action Plans 1: Emergency Management Team on advice of Business
Continuity Manager
2.7 Key First Priority
2.8 Contact Lists
2.9 Vital Materials List
2.10 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
2.11 Emergency Management Team Activity Log

SECTION 3: BUSINESS CONTINUITY MANAGER
3. Business Continuity Manager
3.1 Role and Responsibilities
3.2 Supporting Staff
3.3 Standby Locations
3.4 Actions for Business Continuity Manager
3.5 Key First Priority
3.6 Contact Lists
3.7 Vital Materials List
3.8 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
3.9 Business Continuity Manager Activity Log:______________________TEAM

SECTION 4: INFORMATION TECHNOLOGY RECOVERY TEAM
4. Information Technology Recovery Team (Standby Site)
4.1 Role & Responsibilities
4.2 Staffing
4.3 Standby Locations
4.4 Public Relations
4.5 Information Technology Recovery Team Action Plan: Overview
4.5.1 Information Technology Recovery Team Action Plan: VAX Systems
4.5.2 Information Technology Recovery Team Action Plan: Critical Applications
4.5.3 Information Technology Recovery Team Action Plan: Network Servers &
LANs
Information Technology Recovery Team Action Plan: Network Servers &
LANs (continued)
4.5.4 Information Technology Recovery Team Action Plan: Desktops
4.5.5 Information Technology Recovery Team Action Plan: Voice & Data
Communications
4.5.6 Information Technology Recovery Team Action Plan: Supplies
4.5.7 Information Technology Recovery Team Plan: Off-Site Storage
4.6 Key First Priority
4.7 Contact Lists
4.8 Vital Materials List
4.9 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
4.10 Information Technology Business Continuity Activity Log:
_____________TEAM

SECTION 5: BASE SITE RECOVERY & DAMAGE ASSESSMENT &
SALVAGE
TEAMS
TBD (Base Site) Recovery Plan
5. Base Site Plan
5.1 Introduction
5.2 Responsibilities
5.3 Staffing; Team Composition and Contacts
5.4 Standby Locations
5.5 Inform and Assist the Emergency Services
5.6 Plans and Documents
5.7 Public Relations
5.8 Base Site Team Action Plan
5.9 Base Site Team Action Plan: Damage Assessment and Salvage
5.10 Key First Priority
5.11 Contact Lists
5.12 Vital Materials List
5.13 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
5.14 Base Site Team Business Continuity Activity Log:______________TEAM

SECTION 6: LOGISTICS TEAM PLAN
6. Logistics Team
6.1 Logistics Team Role
6.2 Staffing
6.3 Standby Locations
6.4 Public Relations
6.5 Logistics Team Action Plan
6.6 Key First Priority
6.7 Contact Lists
6.8 Vital Materials List
6.9 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
6.10 Logistics Business Continuity Activity Log: _________________TEAM

SECTION 7: BUYING & MERCHANDISING TEAM PLAN
7. Buying & Merchandising Team
7.1 Buying & Merchandising Team Role
7.2 Staffing
7.3 Standby Locations
7.4 Public Relations
7.6 Buying & Merchandising Team Action Plan
7.7 Key First Priority
7.8 Contact Lists
7.9 Vital Materials List
7.10 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
7.11 Buying & Merchandising Business Continuity Activity Log:
______________TEAM
SECTION 8: MARKETING TEAM PLAN
8. Marketing Team
8.1 Marketing Team Role
8.2 Staffing
8.3 Standby Locations
8.4 Public Relations
8.5 Marketing Team Action Plan
8.6 Key First Priority
8.7 Contact Lists
8.8 Vital Materials List
8.9 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
8.10 Marketing Business Continuity Activity Log:_________________TEAM

SECTION 9: RETAIL OPERATIONS TEAM PLAN
9. Retail Operations Team
9.1 Retail Operations Team Role
9.2 Staffing
9.3 Standby Locations
9.4 Public Relations
9.5 Retail Operations Team Action Plan
9.6 Key First Priority
9.7 Contact Lists
9.8 Vital Materials List
9.9 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
9.10 Retail Operations Business Continuity Activity Log:____________TEAM

SECTION 10: OFFICE SERVICES TEAM PLAN
10. Office Services Team
10.1 Office Services Team Role
10.2 Staffing
10.3 Standby Locations
10.4 Public Relations
10.5 Office Services Team Action Plan
10.6 Key First Priority
10.7 Contact Lists
10.8 Vital Materials List
10.9 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
10.10 Building Plans And Occupation
10.11 Office Services Business Continuity Activity Log:______________TEAM

SECTION 11: FINANCE & ADMINISTRATION TEAM PLAN
11. Finance & Administration Team
11.1 Finance & Administration Team Role
11.2 Staffing
11.3 Standby Locations
11.4 Public Relations
11.5 Finance & Administration Team Action Plan: Finance
11.6 Finance & Administration Team Action Plan: Administration
11.5 Key First Priority
11.7 Contact Lists
11.8 Vital Materials List
11.9 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
11.9 Finance & Administration Business Continuity Activity Log:
___________TEAM

SECTION 12: HUMAN RESOURCES TEAM PLAN
12. Human Resources Team
12.1 Human Resources Team Role
12.2 Staffing
12.3 Standby Locations
12.4 Public Relations
12.5 Human Resources Team Action Plan
12.6 Key First Priority
12.7 Building Plans And Occupation
12.8 Contact Lists
12.10 Vital Materials List
12.11 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
12.11 HR Business Continuity Activity Log:_______________TEAM

SECTION 13: MEDIA & PUBLIC RELATIONS TEAM PLAN
13. Media & Public Relations Team
13.1 Media & Public Relations Team Role
13.2 Staffing
13.3 Standby Locations
13.4 Media & PR Team Action Plan
13.5 Key Tasks
13.6 Contact Lists
13.7 Vital Materials List
13.8 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
13.9 Media & PR Business Continuity Activity Log:________________TEAM

SECTION 14: TBD TEAM PLAN
14. TBD Team
14.1 TBD Team Role
14.2 Staffing
14.3 Standby Locations
14.4 Public Relations
14.5 TBD Team Action Plan
14.6 Key First Priority
14.7 Contact Lists
14.8 Vital Materials List
14.9 Equipment & Software & Timescale For Provision. Complete for each
functional area or department
14.10 TBD Business Continuity Activity Log:___________TEAM

ANNEX A: DOCUMENT CONFIGURATION MANAGEMENT
A.1 Document Approval
A.2 Document Configuration
A.3 Change Log

=======================================

EXAMPLES OF THE CONTENTS OF APPENDICES TO THE BUSINESS
CONTINUITY PLAN

Appendix A: Contacts
A-1: Notification List of Team Leaders and Team Members
A-2 Notification List of Support Contacts : Emergency Management
Team &
Business Continuity Manager
A-3 Contacts: Information Technology Team
A-4 Contacts: Base Site Recovery Team
A-5 Contacts: Logistics Team
A-6 Buying & Merchandising Team
A-7 Contacts: Marketing Team
A-8 Contacts: Retail Operations Team
A-9 Contacts: Properties Team
A-9 Contacts: Finance & Administration Team
A-10 Contacts: Human Resources Team
A-11 Contacts: Media & PR Team
A-12 Contacts: TBD Recovery Team
A.13 Alternative Staff Arrangements
Appendix B: Incident and Damage Reports
2 Damage Report
Appendix C: Emergency Management Team Control Centre
Appendix D: Team Leaders Meeting
Appendix E: Recovery Time Estimate
Appendix F: Information and Reporting
Appendix G: Alert & Escalation: Explanatory Notes
Appendix H Activity Logs
Appendix I : IT Application Inventory
Appendix J: Capacity Requirements TBD
Appendix K: Backup System Configuration
Appendix L: Backup Communication Network
Appendix M: Contracts and Insurance Policies TBD
Appendix N: Backup Sites and other Temporary Locations TBD
Appendix O: Setting up the Control Centre
Appendix P: Material in Off-Site Storage
Appendix Q: Glossary
Appendix R: PC/LAN Restoration Procedures
TBD
R-1 : PC Restoration
Appendix S: Document Configuration Management
S.1 Document Approval
S.2 Document Configuration
S.2 Document Changes

=======================================

ABOUT KINGSWELL INTERNATIONAL LTD.

Kingswell has over 15 years experience in providing tailored solutions to public and
private sector organizations, from multinationals to dynamic, smaller enterprises.
Kingswell adheres to the BCI and CSSA codes of practice for consultants. The four
founding partners were previously successful practicing consultants, working with
organizations like Accenture, KPMG, McKinsey & Company, PwC, Logica, and
BIS. We have highly skilled associates both in the UK and internationally in North
America, Europe, the Middle East, the Indian sub-continent, and the Pacific Rim.
One of our directors was founder and, for some 15 years, Chairman of the first
international user group for business continuity professionals and was a founding
director of the Business Continuity Institute (the international certification body for
business recovery professionals). He is a member of the Advisory Board of the
Continuity Forum. An associate was the first elected Chairman of the Business
Continuity Institute. Two Kingswell directors were nominated for the lifetime
achievement at the first industry awards ceremony. Our assignments have covered
some 60 countries: in the Americas; Western, Central and Eastern Europe;
Russia; the Indian sub-continent; China; the Pacific Rim and Australasia; and in
the Middle East.

We have provided broad business continuity consultancy to a number of blue
clients including the public sector, governmental and inter-governmental
organizations and across virtually all professions and market sectors including:
American Express, JP Morgan, BBC, Commerzbank, Prudential, Financial Times,
Emirates, Rolls Royce, Philips Electronics B.V., Saudi Aramco, Kuwait National
Petroleum Company, Sandoz, Rolls-Royce, Pfizer, UK National Health Trusts,
Reading University, Swiss Life, Vodafone.

We have provided Business Continuity consultancy through Hewlett Packard to
their clients. Kingswell developed the physical and web based BC training courses
provided by the American Institute of Certified Public Accountants for their 330,000
members and we also provided BC training through the UK Office of Government
Commerce for the public sector.

Just as you would not entrust your finances to unqualified accountants, so it is
important to ensure your business continuity consultants are qualified. Kingswell’s
consultants are Fellows or Members of the Business Continuity Institute.
BUSINESS CONTINUITY MANAGEMENT FRAMEWORK has been developed
exclusively by Fellows of the Business Continuity Institute (FBCI).

=======================================

Published by Rothstein Associates Inc.

Enterprise, multi-location, developer and multinational licensing are
available.
Contact info@rothstein.com.

2008, CD-ROM. Order #DR475
ISBN #1-931332-43-6

IN STOCK FOR IMMEDIATE SHIPMENT

Contact Rothstein Associates Inc. for enterprise, developer and other
licensing
options, at info@rothstein.com.

=======================================

*** SPECIAL OFFER: ***

Save $39.00 when you purchase the landmark book,
BUSINESS CONTINUITY: BEST PRACTICES (Second Edition) by Andrew
Hiles, together with BCM FRAMEWORK
Order #DR476. (SPECIAL OFFER - CD + Book)

=======================================

The Disaster Center Bookstore

Business Continuity, Disaster Recovery

Disaster Center Bookstore-a service of Rothstein Associates