The Binomial Bookstore

BUSINESS CONTINUITY MANAGEMENT (BCM) FRAMEWORK(TM) CD-ROM:
THE EASY-TO-USE, COMPREHENSIVE, BUSINESS CONTINUITY TOOL
NEW - VERSION 2
By Kingswell International, Ltd.

Published by Rothstein Associates Inc.

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK is a comprehensive,
word-processor-driven Business Continuity Management template with extensive
Standards-Driven components..

=======================================

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK represents a new approach in
disaster recovery software tools. The problem with a lost of software is that it is expensive
(typically £6,000 - £20,000); it requires training in use of the software; it may require
consultancy in its use; it does not necessarily match your culture, requirements, or
documentation standards; and it still requires a lot of work to complete the detail, without
which any disaster recovery plan is worthless.

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK is different. It is comprised of a
number of easily tailored modules that are selected from our database of client work from a
combined total of over one hundred years of consultancy experience - modules that are hand
picked as the most relevant to your own situation, culture, organization, equipment platform
and infrastructure. It contains Model Business Recovery Action Plans for key corporate
functions with Organization Schematics and role descriptions, with some vital - and often
forgotten - actions included. The Appendices cover, among other items:
- Contact List formats
- Control Room set-up
- Disaster Evaluation and Invocation Procedure
- Recovery Time Estimating
- Incident and Damage Reporting formats
- Activity Logs and Action Logging formats
- Vital Materials Lists
- Agenda for Team Leaders’ Meeting
- Plan Maintenance: Document Configuration Control structure
- Project plans
- Outline Restoration Procedures
- Plan Testing Strategy
- Plan Testing forms

The appropriate Outline Restoration Procedures will be selected from the best match with
your platforms.

BUSINESS CONTINUITY MANAGEMENT FRAMEWORK offers a structured approach to
achieve a disaster recovery plan for you in the simplest, easiest way. The plan can be
developed in a style and to documentation standards compatible with your organization's
culture and standards. It is important that line management take ownership of their aspects of
the plan, so for your ease of use and maintenance, BUSINESS CONTINUITY MANAGEMENT
FRAMEWORK is developed in standard MS Word format.

=======================================

WHY KINGSWELL’S BUSINESS CONTINUITY MANAGEMENT FRAMEWORK?

Kingswell has some eight years experience in providing tailored solutions to public and
private sector organizations, from multinationals to dynamic, smaller enterprises. Kingswell
adheres to the BCI and CSSA codes of practice for consultants. The four founding partners
were previously successful practicing consultants, working with organizations like Accenture,
KPMG, Logica, McKinsry & Company and BIS. We have a growing number of highly skilled
associates both in the UK and internationally. One of our directors was founder and, for some
15 years, Chairman of the first international user group for business continuity professionals
and was a founding director of the Business Continuity Institute (the international certification
body for business recovery professionals). He is a member of the Advisory Board of the
Continuity Forum. An associate was the first elected Chairman of the Business Continuity
Institute. Two Kingswell directors were nominated for the lifetime achievement at the first
industry awards ceremony. We operate not only in the UK, but also in the USA (through
Kingswell Inc.); in the Pacific Rim and Australasia; in the Middle East, South America and in
mainland Europe (with offices in the Netherlands and Germany).

We have provided broad business continuity consultancy to a number of clients including JP
Morgan, BBC, Commerzbank, Prudential, Financial Times, Rolls Royce, Philips Electronics
B.V. Sandoz, Pfizer, Unipath, Southport and Formby Community Health Services National
Health Trust, Reading University, Swiss Life. We have provided Business Continuity
consultancy through Hewlett Packard to their clients. Kingswell developed the physical and
web based BC training courses provided by the American Institute of Certified Public
Accountants for their 330,000 members and we also provided BC training through the UK
Office of Government Commerce for the public sector.

Just as you would not entrust your finances to unqualified accountants, so it is important to
ensure your business continuity consultants are qualified. Kingswell’s consultants are
Fellows or Members of the Business Continuity Institute. BUSINESS CONTINUITY
MANAGEMENT FRAMEWORK has been developed exclusively by Fellows of the Business
Continuity Institute.

=======================================

WHAT YOU GET

The BUSINESS CONTINUITY MANAGEMENT FRAMEWORK package includes the
numerous documents, models, examples and checklists covering all of the Business
Continuity Institute (BCI) / Disaster Recovery Institute International (DRII) core competencies
and follows BCI / British Standards Institution PAS 56 standards.

The BCM FRAMEWORK package includes:

PROJECT INITIATION & MANAGEMENT
1 Pre-Engagement Form
2 Project Briefing Form
3 Project Information Requirements
4 Project Scoping Considerations
5 Example BC Terms of Reference & Scope
6 Example BC Scope 2
7 Example Simple Project Plan MS Word®
8 Example Policy Statement
9 Bc Oriented Tiers & Site SLA
10 Example MS Excel® Project Plan 2
11a Example MS Excel® Project Plan 1
11b Example MS Excel® Project Plan 1
11c Example MS Excel® Project Plan 1
12a Example MS Project ® Project Plan 2
12b Example MS Project ® Project Plan 3
12c Example MS Project ® Project Plan 4
12d Example MS Project ® Project Plan 5
13 Project Highlight Report
14 Project Report
15 BC Process Flow
16 Presentation – BC Management Briefing
17 BC Coordinator Job Description

RISK & IMPACT ASSESSMENT
0 Risk Management
1 Risk Analysis Checklist
2 Site Risk Assessment (MS Word®)
3 Site Risk Assessment (MS Excel®)
4 BIA Questionnaire
5 BIA Interview Questionnaire
6 Data Collection Forms
7 BIA Summary
8 Business Interruption Risk Questionnaire
9 Vital Records Categories
10 RA Checklist – H&S, Environmental
11 Fire Assessment Checklist
12 Risk Assessment Form
13 Risk Assessment Report Template
14 Example Risk Rating
15 Example Risk Management Process
16 Example Mail Order BIA
17 RA Format
18 Vital Materials Questionnaire

. STRATEGY
1 Strategy Report Example Terms of Reference
2 Example Preface, Strategy Report
3 Example of a Board BC Report
4 Developing & Implementing BCP
1 Incident Alert Form
2 Example Emergency Policy
3a BC Plan Template - BC Framework
3b BCP Finance
3c BCP Media
3d Media Checklist
3e BCP Office Services
3f BCP Personnel
3g BCP Retail & Logistics
3h BCP Appendices
4 Vendor Checklist
5 Example IT Recovery Site Vendor Specification
6 BCP Software Questionnaire 1
7 BCP Software Questionnaire 2
8 Data Center SLA
9 Data Center M&E Specifications & SLA
10 Charities Disaster Checklist
11 Charities Continuity Planning Template
12 Disaster Plan Pro Forma

BCP AUDIT & TESTING
1 Audit
2 Testing – the Case
3 Test Strategy
4 Test Planning Form
5 BC Test Checklist
6 Example Brief for Observers
7 Walkthrough Test Scenario
8 Example Scenario and Sitreps
9 Example Test Report
10 Example Test Report
11 Example Audit Plan

ARTICLES FOR AWARENESS
1 BC - A Matter for the Board
2 BC & Risk Quality
3 Enterprise Risk Management
4 Brand & Reputation Continuity
5 BC Keeping Customers
6 Data Loss
7 E-com Risk
8 The UK Foot & Mouth Disaster
9 Issues in European Continuity
10 Public Sector Disaster
11 Supplier Risk
12 Turnbull Report
13 Why IT Disaster Recovery isn’t Enough
14 Contractual Arrangements for DR Services
15 Industry Standard Tier Classifications

=======================================

Within each folder, the sequential numbers indicate a logical sequence.

All documents are in MS Word format except:
-? BIA Summary v2 is in MS Excel format.
?- Risk Assessment which is also in MS Excel format
?- Example MS Project Plan is in MS Project format.

=======================================

ABOUT THE AUTHORS

Kingswell has some eight years experience in providing tailored solutions to public and
private sector organizations, from multinationals to dynamic, smaller enterprises. Kingswell
adheres to the BCI and CSSA codes of practice for consultants. The four founding partners
were previously successful practicing consultants, working with organizations like Accenture,
KPMG, Logica, McKinsry & Company and BIS. We have a growing number of highly skilled
associates both in the UK and internationally. One of our directors was founder and, for some
15 years, Chairman of the first international user group for business continuity professionals
and was a founding director of the Business Continuity Institute (the international certification
body for business recovery professionals). He is a member of the Advisory Board of the
Continuity Forum. An associate was the first elected Chairman of the Business Continuity
Institute. Two Kingswell directors were nominated for the lifetime achievement at the first
industry awards ceremony. We operate not only in the UK, but also in the USA (through
Kingswell Inc.); in the Pacific Rim and Australasia; in the Middle East, South America and in
mainland Europe (with offices in the Netherlands and Germany).

We have provided broad business continuity consultancy to a number of clients including JP
Morgan, BBC, Commerzbank, Prudential, Financial Times, Rolls Royce, Philips Electronics
B.V. Sandoz, Pfizer, Unipath, Southport and Formby Community Health Services National
Health Trust, Reading University, Swiss Life. We have provided Business Continuity
consultancy through Hewlett Packard to their clients. Kingswell developed the physical and
web based BC training courses provided by the American Institute of Certified Public
Accountants for their 330,000 members and we also provided BC training through the UK
Office of Government Commerce for the public sector.

Just as you would not entrust your finances to unqualified accountants, so it is important to
ensure your business continuity consultants are qualified. Kingswell’s consultants are
Fellows or Members of the Business Continuity Institute. BUSINESS CONTINUITY
MANAGEMENT FRAMEWORK has been developed exclusively by Fellows of the Business
Continuity Institute.

=======================================

EXAMPLE CONTENTS OF THE BUSINESS CONTINUITY PLAN

This is an example only. Should the contents below not be representative of your industry or
market sector, please contact us: we have a library of plans tailored to most industry sectors.

BUSINESS CONTINUITY PLAN CONTENTS

SECTION 1: OVERVIEW
1.1 Introduction
1.2 Scope of the Plan
1.2.1 Base Site Functions and Services Generally
1.2.2 Scope of Plan
1.2.3 Standby Procedures
1.2.4 Services Covered by the Plan
1.2.5 Assumptions
1.3 Structure of the Plan
1.4 Contents of the Plan
1.4.1 Overview, Emergency Management Plan & Business Continuity Manager's Role
1.4.2 TBD Information Technology Recovery Team: Standby Site
1.4.3 Base Site Team
1.4.4 Damage Assessment & Salvage Team Plan
1.4.5 Logistics Team Plan
1.4.6 Buying & Merchandising Team Plan
1.4.7 Marketing Team Plan
1.4.8 Retail Operations Team Plan
1.4.9 Office Services Team Plan
1.4.10 Finance & Administration Team Plan
1.4.11 Human Resources Team Plan
1.4.12 Media & Public Relations Team Plan
1.4.13 TBD Team Plan
1.5 Organization and Management
1.6 Recovery Teams
1.7 Team Members and Contact Lists
1.8 Standby /Emergency Locations
1.9 Security of the Business Continuity (BC) Plan
1.10 Changes to the Plan
1.11 Distribution of the Plan
Figure 1: Business Continuity Organization & Roles: Overview
(For names and Contacts see Appendix A-1)

SECTION 2: EMERGENCY MANAGEMENT PLAN
2. Emergency Management Plan
2.1 Introduction
2.2 Emergency Management Team
2.3 Staffing and Team Composition
2.4 Standby Locations
2.5 Public Relations
2.6 Action Plans 1: Emergency Management Team on advice of Business Continuity
Manager
2.7 Key First Priority
2.8 Contact Lists
2.9 Vital Materials List
2.10 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
2.11 Emergency Management Team Activity Log

SECTION 3: BUSINESS CONTINUITY MANAGER
3. BUSINESS CONTINUITY MANAGER
3.1 Role and Responsibilities
3.2 Supporting Staff
3.3 Standby Locations
3.4 Actions for Business Continuity Manager
3.5 Key First Priority
3.6 Contact Lists
3.7 Vital Materials List
3.8 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
3.9 Business Continuity Manager Activity Log:______________________TEAM

SECTION 4: INFORMATION TECHNOLOGY RECOVERY TEAM
4. Information Technology Recovery Team (Standby Site)
4.1 Role & Responsibilities
4.2 Staffing
4.3 Standby Locations
4.4 Public Relations
4.5 Information Technology Recovery Team Action Plan: Overview
4.5.1 Information Technology Recovery Team Action Plan: VAX Systems
4.5.2 Information Technology Recovery Team Action Plan: Critical Applications
4.5.3 Information Technology Recovery Team Action Plan: Network Servers & LANs
Information Technology Recovery Team Action Plan: Network Servers & LANs (continued)
4.5.4 Information Technology Recovery Team Action Plan: Desktops
4.5.5 Information Technology Recovery Team Action Plan: Voice & Data Communications
4.5.6 Information Technology Recovery Team Action Plan: Supplies
4.5.7 Information Technology Recovery Team Plan: Off-Site Storage
4.6 Key First Priority
4.7 Contact Lists
4.8 Vital Materials List
4.9 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
4.10 Information Technology Business Continuity Activity
Log:______________________TEAM

SECTION 5: BASE SITE RECOVERY & DAMAGE ASSESSMENT & SALVAGE TEAMS
TBD (BASE SITE) RECOVERY PLAN
5. BASE SITE PLAN
5.1 Introduction
5.2 Responsibilities
5.3 Staffing; Team Composition and Contacts
5.4 Standby Locations
5.5 Inform and Assist the Emergency Services
5.6 Plans and Documents
5.7 Public Relations
5.8 Base Site Team Action Plan
5.9 Base Site Team Action Plan: Damage Assessment and Salvage
5.10 Key First Priority
5.11 Contact Lists
5.12 Vital Materials List
5.13 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
5.14 Base Site Team Business Continuity Activity Log:______________________TEAM
SECTION 6: LOGISTICS TEAM PLAN
6. LOGISTICS TEAM
6.1 Logistics Team Role
6.2 Staffing
6.3 Standby Locations
6.4 Public Relations
6.5 Logistics Team Action Plan
6.6 Key First Priority
6.7 Contact Lists
6.8 Vital Materials List
6.9 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
6.10 Logistics Business Continuity Activity Log:______________________TEAM

SECTION 7: BUYING & MERCHANDISING TEAM PLAN
7. BUYING & MERCHANDISING TEAM
7.1 Buying & Merchandising Team Role
7.2 Staffing
7.3 Standby Locations
7.4 Public Relations
7.6 Buying & Merchandising Team Action Plan
7.7 Key First Priority
7.8 Contact Lists
7.9 Vital Materials List
7.10 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
7.11 Buying & Merchandising Business Continuity Activity
Log:______________________TEAM

SECTION 8: MARKETING TEAM PLAN
8. MARKETING TEAM
8.1 Marketing Team Role
8.2 Staffing
8.3 Standby Locations
8.4 Public Relations
8.5 Marketing Team Action Plan
8.6 Key First Priority
8.7 Contact Lists
8.8 Vital Materials List
8.9 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
8.10 Marketing Business Continuity Activity Log:______________________TEAM

SECTION 9: RETAIL OPERATIONS TEAM PLAN
9. RETAIL OPERATIONS TEAM
9.1 Retail Operations Team Role
9.2 Staffing
9.3 Standby Locations
9.4 Public Relations
9.5 Retail Operations Team Action Plan
9.6 Key First Priority
9.7 Contact Lists
9.8 Vital Materials List
9.9 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
9.10 Retail Operations Business Continuity Activity Log:______________________TEAM
SECTION 10: OFFICE SERVICES TEAM PLAN
10. OFFICE SERVICES TEAM
10.1 Office Services Team Role
10.2 Staffing
10.3 Standby Locations
10.4 Public Relations
10.5 Office Services Team Action Plan
10.6 Key First Priority
10.7 Contact Lists
10.8 Vital Materials List
10.9 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
10.10 Building Plans And Occupation
10.11 Office Services Business Continuity Activity Log:______________________TEAM
SECTION 11: FINANCE & ADMINISTRATION TEAM PLAN
11. FINANCE & ADMINISTRATION TEAM
11.1 Finance & Administration Team Role
11.2 Staffing
11.3 Standby Locations
11.4 Public Relations
11.5 Finance & Administration Team Action Plan: Finance
11.6 Finance & Administration Team Action Plan: Administration
11.5 Key First Priority
11.7 Contact Lists
11.8 Vital Materials List
11.9 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
11.9 Finance & Administration Business Continuity Activity
Log:______________________TEAM

SECTION 12: HUMAN RESOURCES TEAM PLAN
12. HUMAN RESOURCES TEAM
12.1 Human Resources Team Role
12.2 Staffing
12.3 Standby Locations
12.4 Public Relations
12.5 Human Resources Team Action Plan
12.6 Key First Priority
12.7 Building Plans And Occupation
12.8 Contact Lists
12.10 Vital Materials List
12.11 Equipment & Software & Timescale For Provision. Complete for each functional area
or department
12.11 HR Business Continuity Activity Log:______________________TEAM

SECTION 13: MEDIA & PUBLIC RELATIONS TEAM PLAN
13. MEDIA & PUBLIC RELATIONS TEAM
13.1 Media & Public Relations Team Role
13.2 Staffing
13.3 Standby Locations
13.4 Media & PR Team Action Plan
13.5 Key Tasks
13.6 Contact Lists
13.7 Vital Materials List
13.8 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
13.9 Media & PR Business Continuity Activity Log:______________________TEAM

SECTION 14: TBD TEAM PLAN
14. TBD TEAM
14.1 TBD Team Role
14.2 Staffing
14.3 Standby Locations
14.4 Public Relations
14.5 TBD Team Action Plan
14.6 Key First Priority
14.7 Contact Lists
14.8 Vital Materials List
14.9 Equipment & Software & Timescale For Provision. Complete for each functional area or
department
14.10 TBD Business Continuity Activity Log:______________________TEAM

ANNEX A : DOCUMENT CONFIGURATION MANAGEMENT
A.1 Document Approval
A.2 Document Configuration
A.3 Change Log

=======================================

EXAMPLES OF THE CONTENTS OF APPENDICES TO THE BUSINESS CONTINUITY
PLAN

APPENDIX A: CONTACTS
A-1: Notification List of Team Leaders and Team Members
A-2 Notification List of Support Contacts: Emergency Management Team & Business
Continuity Manager
A-3 Contacts: Information Technology Team
A-4 Contacts: Base Site Recovery Team
A-5 Contacts: Logistics Team
A-6 Buying & Merchandising Team
A-7 Contacts: Marketing Team
A-8 Contacts: Retail Operations Team
A-9 Contacts: Properties Team
A-9 Contacts: Finance & Administration Team
A-10 Contacts: Human Resources Team
A-11 Contacts: Media & PR Team
A-12 Contacts: TBD Recovery Team
A.13 Alternative Staff Arrangements

APPENDIX B: INCIDENT AND DAMAGE REPORTS
2 Damage Report

APPENDIX C: EMERGENCY MANAGEMENT TEAM CONTROL CENTRE

APPENDIX D: TEAM LEADERS MEETING

APPENDIX E: RECOVERY TIME ESTIMATE

APPENDIX F: INFORMATION AND REPORTING

APPENDIX G: ALERT & ESCALATION: EXPLANATORY NOTES

APPENDIX H ACTIVITY LOGS

APPENDIX I: IT APPLICATION INVENTORY

APPENDIX J: CAPACITY REQUIREMENTS TBD

APPENDIX K: BACKUP SYSTEM CONFIGURATION

APPENDIX L: BACKUP COMMUNICATION NETWORK

APPENDIX M: CONTRACTS AND INSURANCE POLICIES TBD

APPENDIX N: BACKUP SITES AND OTHER TEMPORARY LOCATIONS TBD

APPENDIX O: SETTING UP THE CONTROL CENTER

APPENDIX P: MATERIAL IN OFF-SITE STORAGE

APPENDIX Q: GLOSSARY

APPENDIX R: PC/LAN RESTORATION PROCEDURES (TBD)
R-1 : PC RESTORATION

APPENDIX S: DOCUMENT CONFIGURATION MANAGEMENT
S.1 Document Approval
S.2 Document Configuration
S.2 Document Changes

=======================================

Published by Rothstein Associates Inc.

Enterprise, multi-location, developer and multinational licensing are available. Contact
info@rothstein.com.

2005, CD-ROM. Order #DR475
ISBN #1-931332-33-9

IN STOCK FOR IMMEDIATE SHIPMENT

=======================================

*** SPECIAL OFFER: ***

Save $39.00 when you purchase the landmark book,
BUSINESS CONTINUITY: BEST PRACTICES (Second Edition) by Andrew Hiles, together
with BCM FRAMEWORK
Order #DR476. (SPECIAL OFFER - CD + Book)

=======================================

The Binomial Bookstore

Software; CD/Diskette Products

Rothstein Associates Inc.