The Binomial Bookstore

BUSINESS IMPACT ANALYSIS TEMPLATE ON CD-ROM:
A TOOL FOR BUSINESS CONTINUITY
- plus -
BUSINESS CONTINUITY PLANNING TEMPLATE ON CD-ROM
- plus -
CRISIS MANAGEMENT PROTOCOLS FOR BUSINESS:
A CRISIS MANAGEMENT TEMPLATE ON CD-ROM
by Douglas M. Henderson, FSA, CBCP

- - - - - - -
Special Offer!
Save $47.00 off the price of these three templates when purchased together!
- - - - - - -

The Business Impact Analysis Template is designed to be completed before a Business
Continuity Plan is developed. Business Impact Analysis Template addresses the
information collection process and then guides the user (with Author's Notes and Sample
BIA Reports) to create a BIA. The BIA provides the information and guidance essential for
the development of the Business Continuity Plan.

- - - - - - -

BUSINESS IMPACT ANALYSIS TEMPLATE OUTLINE

I. Executive Summary

II. Business Operations
A. General Operations
B. Business Units (Support Departments & Operational Groups)
C. Critical Business Operations
D. Critical Applications

III. Risk & Vulnerability Analysis
A. Identification of Threats
B. Risk Probability
C. Expected Scope of Damage
D. Expected Impact
E. Risk Evaluation

IV. Critical Support Infrastructure
A. Buildings
B. Building Contents
C. Interdependencies
D. Other Businesses
E. Community Infrastructure

V. Physical Environment
A. Controls in Place
B. Exposures

VI. Recovery Time Objective
A. Operational Groups
B. Support Departments - non-IT
C. Support Departments - IT

VII. Business Recovery Strategies
A. Analysis of Disaster Risks
B. Business Factors
C. Recovery Strategy

- - - - - - -
- - - - - - -

BUSINESS CONTINUITY PLANNING TEMPLATE ON CD-ROM

The Business Continuity Plan Template addresses the information from the Business Impact
Analysis and then guides the user (with Author's Notes and Sample BCPs) to create a BCP.
The structure of the BCP is designed to be compatible with organization of a typical
business and should require little modification. Detailed checklists for the Business Units
provide additional information that is useful in developing the Business Unit Plans. Two
sample BCPs are included to assist the user: one for a hypothetical service industry
business and the other for a hypothetical manufacturing business.

- - - - - - -

BUSINESS CONTINUITY PLANNING TEMPLATE OUTLINE

I. Executive Summary
A. Purpose
B. Scope
C. Mission
D. Business Objectives
E. Assumptions

II. Business Operations
A. General Operations
B. Business Units
C. Business Operations

III. Organization
A. Emergency Management Team
B. Emergency Response Team
C. Business Units
D. Individuals with Critical Responsibilities
E. Overall Organization

IV. Plan Activation & Operation
A. Level of Response
B. Plan Notification & Activation
C. Command Posts
D. Business Recovery
E. Recovery Strategies

V. Preparation & Response Checklists
A. Checklist Organization
B. Action Step Execution
C. Business Services - Finance, Risk Management & Legal
D. Facilities
E. Human Resources
F. Information Technology
G. Sales & Marketing
H. Security
I. Business Operations - Operational Groups
J. Manufacturing Operations
K. Engineering R & D
L. Purchasing/Shipping/Receiving
M. Warehouse Operations

VI. Emergency Operations Center
A. Location
B. Personnel
C. Specifications

VII. Facility Restoration & Relocation
A. Facility Restoration
B. Relocation Requirements - Office
C. Relocation Requirements - Manufacturer
D. Relocation Requirements - Distribution Center

VIII. Communications
A. Communication Responsibilities
B. Employee Communication

IX. Appendices
A. Damage Assessment: Facility
B. Damage Assessment: Office
C. Communications with the Media
D. Sample Emergency Announcements
E. Important National Weather Service Terms
F. Important Seismic Terms
G. Fire Safety & Prevention
H. Hazardous Materials Safety
I. Equipment Operation Instructions
J. Personnel Status Report
K. Critical Suppliers & Contractors
L. Physical Facility Fortification
M. Alternate Site Planning Levels
N. Alternate Site Service Providers
O. Incident Command System
P. Ongoing Exercise, Training & Update

X. Attachments
A. External Contacts
B. Internal Contacts
C. Equipment Requirements (by Business Unit)
D. System Requirements (by Business Unit)
E. Vital Records Management
F. Business Impact Analysis
G. Crisis Management Protocols
H. Emergency Response Plan for Employees
I. Additional Attachments

- - - - - - -
- - - - - - -

CRISIS MANAGEMENT PROTOCOLS FOR BUSINESS:
A CRISIS MANAGEMENT TEMPLATE ON CD-ROM

How do we respond to an emergency?
What are the priorities?
What actions should we take first?
How do we return to normal operations?

The CRISIS MANAGEMENT PROTOCOLS FOR BUSINESS template identifies
step-by-step solutions to these and other important questions. The Plan is designed to
provide guidance to the Emergency Response Team and the leaders of the company to
respond to an actual crisis event. As such the Plan is written in a concise format that makes
it highly useful during an emergency event.

Ongoing and overall emergency response operations are defined in the organization's
Business Continuity Plan (BCP). The Crisis Management Protocols (CMP) for Business is
designed to work with, and not replace, your BCP. These plans have important specific
purpose and are intended for use in harness to greatly lessen the extent of injuries and limit
equipment, material, and property damage.

The structure of the Crisis Management Protocols for Business template is designed to be
compatible with organization of a typical business and should require little modification. A
wide range of emergency situations are addressed so that most businesses can simply
edit-out any threats that are not relevant.

- - - - -

In the corporate world, the Business Continuity Plan (BCP) is logically focused on continuing
or rapidly restoring business operations after an emergency event. Often there is little
attention paid to emergency steps that should be taken immediately before, during and
immediately after a disaster event. This is the area where the Crisis Management Protocols
for Business: a Crisis Management Template on CD – ROM can help.

In an actual disaster the most important goals initially are the preservation of life, maintaining
a safe environment and protecting business assets. Only after these steps have been
accomplished can normal and critical business activities continue or be restored. In this way
the Crisis Management Protocols for Business: a Crisis Management Template on CD –
ROM is designed to work with and not to replace the BCP.

The Crisis Management Protocols for Business: a Crisis Management Template on CD –
ROM details the action steps to be taken by the Emergency Response Team (ERT) and the
Company Incident Commander (or ERT Team Leader). The action steps are defined in a
concise format and are organized by the type of disaster. This approach makes the
template easy to use during an actual emergency situation.

The Crisis Management Protocols for Business: a Crisis Management Template on CD –
ROM also contains a template for distribution to employees. Often employees are provided
with emergency response information in a piecemeal manner. Sometimes only Facility
Evacuation procedures are addressed and other important procedures may be missed –
How does the organization communicate a Shelter-in-Place? What actions do employees
take and what actions are not to be taken during a Shelter-in-Place? What do we do if the
country is under a terrorist attack? What are the communication procedures before, during
and after an emergency? The Crisis Management Protocols for Business: a Crisis
Management Template on CD – ROM addresses these and many more questions in a
concise easy to read and understandable format.

- - - - - -

A COMPLETE BUSINESS PLAN

The organization will need to develop a complete scope of plans to address multiple
purposes and the needs of a wide variety of users. We believe that the following specific
plans are needed:

- Business Continuity Plan (BCP) – This is the central or overarching plan for the
business. In addition to defining the overall actions of the organization during an emergency,
the primary objective of the BCP is to maintain or rapidly restore business operations.

- Crisis Management Protocols for Business – This Plan provides the Company
Incident Commander and the Emergency Response Team with emergency instructions to be
executed during specific disaster events. The primary purpose of the Crisis Management
Protocols for Business is the direction of corporate resources and life safety.

- Emergency Response Plan for Employees – This Plan provides all employees
with emergency instructions to be executed during specific disaster events. Individuals who
may have received only basic emergency response training use this plan during emergency
situations. As such, this plan focuses on basic first responder steps. The primary purpose of
the Plan is life safety.

- Business Unit Plans – Each Business Unit (the various support departments,
operational groups or other defined infrastructure entities of the business) with important
disaster preparation and/or response assignments needs to develop a Plan. This Plan
defines the Unit’s actions before, during and after a disaster event.

- - - - - -

OUTLINE

General Procedures
Section I Pre-Disaster Action Steps
Section II Disaster Event
Section III Business Recovery Steps

Natural Disasters
Section IV Earthquake
Section V Flood
Section VI Hurricane
Section VII Severe Winter Storm
Section VIII Thunderstorm
Section IX Tornado

Man-Made Disasters
Section X Civil Disturbance
Section XI Criminal Acts
Section XII Hazardous Release
Section XIII Hostile Intruder/Violent Employee
Section XIV Sudden Emergency
Section XV Terrorist Attack - WMD

Other Disasters
Section XVI Accidents
Section XVII Medical Emergency
Section XVIII Utility Disruption
Section XIX Wildfire

Appendices
A: Business Unit Responsibilities
B: Incident Command System
C: Communications
D: Emergency Operations Center
E: Damage Assessment Forms
F: Resources
G: Contact Information

Attachment A: Emergency Response Plan for Employees

- - - - - -

ABOUT THE AUTHOR

DOUGLAS M. HENDERSON, FSA, CBCP, President of Disaster Management, Inc., has 30
years of experience in the management and human resources fields with national consulting
firms, including nine years as a consultant in a major accounting firm.

In August of 1992, Doug was the key associate of the Emergency Response Team for a
consulting firm located in South Miami-Dade County. Inspired by the real life business
experience with Hurricane Andrew and the lack of preparation within the business and
academic community, Doug founded Disaster Management, Inc.

Doug has a B. S. Degree from the University of Arizona and is a Fellow, Society of Actuaries
(FSA). Doug is a Certified Business Continuity Professional (CBCP), a member of FEPA
(Florida Emergency Preparedness Association), the editor of DisasterALERT, the author of
the book Is Your Business Ready for the Next Disaster?, the author of the Emergency
Management Plan for Colleges & Universities (a COOP planning template) and the
co-author of the Business Continuation Plan for Academic Institutions. Doug has also made
presentations at the National Hurricane Conference, the Florida Governor's Conference, and
to numerous other organizations.

- - - - - - -
Published by Rothstein Associates Inc.
In stock for immediate shipment.
- - - - - - -

Special Offer!
Save $47.00 off the price of these three templates when purchased together!
- - - - - - -

Order #DR750.
ISBN #1-931332-32-0
2005, CD-ROM.
- - - - - - -

The Binomial Bookstore

Titles Published By Rothstein Associates

Rothstein Associates Inc.