Business Continuity and Crisis Management
Business Continuity and Crisis Management is the combination of processes related to manage the collective response to a disruptive event and to establish resilience in the most efficient way before, during and after an incident / disaster / crisis that may cause a business interruption.
CORIN provides robust solutions in the following topics to prepare companies for business interruption, to ensure they gain resilience and flexibility to easily and timely continue their operations and to manage the crisis & crisis communication in the most effective way. Here below mentioned sub-projects are implemented in different variations designed for the needs and objectives of the companies.
Gap Analysis
It is the initial step that includes the examination of the current business continuity management activities, organization, processes and documentation structure of companies, and followingly the creation of a roadmap for the targeted business continuity management maturity level. Within the scope of this study, evaluations are made on the sub-titles of international BCM standards and best practice examples. As the main output, BCM scoring, maturity level and business continuity management roadmap are generated in the main business continuity related areas.
Scenario and Business Continuity Strategy Analysis
It is the study of determining the most effective strategy and project scope for Business Continuity Management in line with the current activities and objectives of the companies. In this study, the most likely incidents (risks, threats) that may cause business interruption are clarified. Following the scenario analysis, strategy and scope for the preventive actions and post incident activities are shaped accordingly.
Business Impact Analysis
Business impact analysis is a structured process to identify and evaluate potential impact of an incident that may cause business interruption on critical business processes and evaluate critical resources needed to recover these processes. The critical business processes operated within the units are detailed and the critical IT system, must-have documents, required minimum critical personnel and 3rd parties for the implementation of those business processes are examined. At the end of this step, critical business process and critical components are documented for supporting the development of business recovery activities.
Business Continuity Plans
Business Continuity Plans are comprehensive documents containing the fundamental information, steps to be taken for the related business continuity component, required resources and implementation guidelines with roles and responsibilities.
Within the scope of this step, 4 main plans are prepared to cover initial response, strategic decision making and recovery process in case of an emergency and a crisis situation.
-
Emergency Management Plan
-
Business Recovery Plan
-
Crisis Management Plan
-
Crisis Communication Plan
Business Recovery Strategies and Steps
Business Recovery Strategies and Steps include the recovery activities of critical processes in each business unit that are prepared according to predetermined interruption and crisis scenarios. It is a guide that critical employees in critical processes can follow.
Critical interruption scenarios are reviewed with each business unit, and the steps to be taken by the relevant business unit and other affected business units are created under the main headings of incident evaluation, preparation and implementation.
Simulation, Testing and Trainings
In this step we aim to gain the ability to test and enhance an established business continuity management plan in a safe environment. To achieve this, our consultants prepare a table-top exercise to simulate an incident and evaluate the business interruption response with upper management team by assessing every component of recently established business continuity management infrastructure in various angles. Within the scope of this study, an evaluation and roadmap reports are prepared which summarize the maturity level of crisis management teams, general awareness, preparedness of decision makers, operational and organizational requirements of the company to fulfill business continuity components.
Periodic Business Continuity Crisis Management Audits
It is the auditing of business continuity activities in a company, in which our consultants review major preparation activities, business continuity documentation and processes in order to sustain and improve BCM structure and finally resilience of the organization. With the help of quantitative and qualitative analysis, we determine main topics that need to be worked on and support the organization to create a roadmap in order to reveal and meet expected criteria. Main output of this step is ISO 22301 audit report which include findings, references on global standards, recommendations and a detailed roadmap for additional improvements