BSBCON801 Learner Resource V1.5

BSBCON801 Establish and
review the business

continuity management
framework and strategies
– Learner Resource
Learner Resource
Student Name
Student Id
BSBCON801 Establish and review the business continuity management framework and strategies 2
Version 1.5
Learner Resource
TABLE OF CONTENTS
Table of Contents..................................................................................................................................3
APPLICATION...................................................................................................................................5
UNIT SECTOR...................................................................................................................................5
ELEMENTS AND PERFORMANCE CRITERIA ..........................................................................5
FOUNDATION SKILLS ....................................................................................................................6
Topic 1 – Establish business continuity management framework.........................................................8
GAIN SUPPORT FOR THE BUSINESS CONTINUITY MANAGEMENT FRAMEWORK
FROM RELEVANT PERSONNEL ..................................................................................................8
DEMONSTRATE CLEAR SPONSORSHIP, RESPONSIBILITY AND ACCOUNTABILITY
FOR BUSINESS CONTINUITY MANAGEMENT FRAMEWORK ..........................................11
IN CONSULTATION WITH OTHERS, ESTABLISH GOVERNANCE STRUCTURES FOR
BUSINESS CONTINUITY MANAGEMENT FRAMEWORK, IN LINE WITH SIZE OF
ORGANISATION.............................................................................................................................14
DETERMINE AND SEEK APPROVAL FOR RESOURCES REQUIRED TO IMPLEMENT
BUSINESS CONTINUITY MANAGEMENT FRAMEWORK ...................................................17
SUPPORT RELEVANT PERSONNEL TO IMPLEMENT BUSINESS CONTINUITY
MANAGEMENT FRAMEWORK ...................................................................................................20
ESTABLISH A MANAGEMENT SYSTEM FOR ORGANISATION’S BUSINESS
CONTINUITY MANAGEMENT PROGRAM ...............................................................................23
SEEK MANAGEMENT APPROVAL OF ORGANISATION’S BUSINESS CONTINUITY
MANAGEMENT FRAMEWORK ...................................................................................................26
Topic 2 - Monitor business continuity management framework and strategies.................................29
DEVELOP AN APPROPRIATE CYCLICAL REVIEW PROCESS FOR MONITORING
PROVIDE RELEVANT PERSONNEL WITH INFORMATION RELATING TO CYCLICAL
REVIEW PROCESS FOR BUSINESS CONTINUITY MANAGEMENT FRAMEWORK .....32
DEVELOP AND SEEK APPROVAL OF TOOLS TO VERIFY AND VALIDATE BUSINESS
CONTINUITY MANAGEMENT FRAMEWORK ACTIVITIES, PROCESSES AND PLANS,
APPROPRIATE TO THE ORGANISATION ...............................................................................35
CONSULT WITH RELEVANT PERSONNEL ABOUT THE IMPLEMENTATION OF
MONITOR BUSINESS CONTINUITY MANAGEMENT FRAMEWORK LEARNING,
DEVELOPMENT AND EXERCISES ACROSS ORGANISATION ...........................................41
Topic 3 - Review and evaluate business continuity management framework and strategies.............44
Version 1.5
Learner Resource
REVIEW AND ANALYSE REPORTS ON BUSINESS CONTINUITY MANAGEMENT

FRAMEWORK LEARNING AND DEVELOPMENT EXERCISES ..........................................44
REVIEW AND ANALYSE THE ORGANISATION’S COMMUNICATION STRATEGY AND
IMPLEMENT CHANGES ...............................................................................................................47
REVIEW AND UPDATE THE OVERALL BUSINESS CONTINUITY MANAGEMENT
FRAMEWORK ACTIVITIES, PROCESSES, PLANS AND RESOURCES ACCORDING TO
RESULTS PRE- AND POST-ACTIVATION ...............................................................................50
ANALYSE AND INTEGRATE ORGANISATION’S BUSINESS IMPACT ASSESSMENT/S
AND IDENTIFY DEPENDENCIES AND INTERDEPENDENCIES IF APPLICABLE .......53
IMPLEMENT AND CONDUCT BUSINESS CONTINUITY MANAGEMENT PROGRAM
AUDITS.............................................................................................................................................56
summary..............................................................................................................................................58
References...........................................................................................................................................59
Version 1.5
Learner Resource
APPLICATION
This unit describes skills and knowledge required to establish, monitor and review the formal
and/or informal business continuity management framework and strategies for an organisation.
It applies to individuals working in positions of authority who have the responsibility for
embedding business continuity management into corporate or organisational levels of a
business.
The framework is important as it provides the processes and resources to ensure continued
achievement of critical business objectives in the event of a disruption (even at diminished
capacity) until full functionality is restored.
No licencing, legislative or certification requirements apply to this unit at the time of

publication.
UNIT SECTOR
Industry Capability – Continuity
ELEMENTS AND PERFORMANCE CRITERIA
ELEMENTS DESCRIBE
PERFORMANCE CRITERIA DESCRIBE THE PERFORMANCE
THE ESSENTIAL
NEEDED TO DEMONSTRATE ACHIEVEMENT OF THE ELEMENT.
OUTCOMES.
1 Establish business 1.1 Gain support for the business continuity management framework
continuity management from relevant personnel
framework
1.2 Demonstrate clear sponsorship, responsibility and accountability for
business continuity management framework
1.3 In consultation with others, establish governance structures for

business continuity management framework, in line with size of
organisation
1.4 Determine and seek approval for resources required to implement

1.5 Support relevant personnel to implement business continuity

management framework
1.6 Establish a management system for organisation’s business

continuity management program
1.7 Seek management approval of organisation’s business continuity

2 Monitor business 2.1 Develop an appropriate cyclical review process for monitoring
continuity management
Version 1.5
Learner Resource
framework and strategies business continuity management framework
2.2 Provide relevant personnel with information relating to cyclical

review process for business continuity management framework
2.3 Develop and seek approval of tools to verify and validate business
continuity management framework activities, processes and plans,
appropriate to the organisation
2.4 Consult with relevant personnel about the implementation of

2.5 Monitor business continuity management framework learning,

development and exercises across organisation
3 Review and evaluate 3.1 Review and analyse reports on business continuity management
business continuity framework learning and development exercises
3.2 Review and analyse the organisation’s communication strategy and
and strategies
implement changes
3.3 Review and update the overall business continuity management

framework activities, processes, plans and resources according to
results pre- and post-activation
3.4 Analyse and integrate organisation’s business impact assessment/s

and identify dependencies and interdependencies if applicable
3.5 Implement and conduct business continuity management program

audits
FOUNDATION SKILLS
THIS SECTION DESCRIBES LANGUAGE, LITERACY, NUMERACY AND EMPLOYMENT SKILLS

INCORPORATED IN THE PERFORMANCE CRITERIA THAT ARE REQUIRED FOR COMPETENT
PERFORMANCE.
Skill Performance Description
Criteria
Reading 3.1-3.4  Interprets and analyses a vast range of textual
information to review organisational agendas and
policies
Writing 1.7, 2.2, 2.3  Develops detailed workplace documentation

clarifying complex ideas using relevant language and
structure according to context and audience
Oral 1.1, 1.3, 2.3, 2.4  Uses clear language, appropriate tone and syntax to
Communication address key personnel and disseminate information
 Uses active listening, observational and questioning
Version 1.5
Learner Resource
techniques to identify different perspectives and

confirm, clarify or revise understanding
Numeracy 1.4  Analyses numerical information to determine

budgetary requirements
Navigate the 1.2, 3.2, 3.3  Takes responsibility and ownership for most or all
world of work aspects of own work, intuitively recognising and
managing factors that may affect achievement of
outcomes
 Recognises, understands and applies organisational
requirements in undertaking own tasks and
achieving expectations
Interact with 1.1, 1.3-1.5, 1.7, 2.2,  Pays close attention to the ways information is
others 2.4 communicated, recognising ways they may influence
interpretation of a message and appreciating the
subtleties
 Actively builds formal and informal networks to
include key people with expert skills, knowledge,
connections and decision-making power
Get the work 1.6, 1.7, 2.1, 2.3, 2.5,  Recognises the critical importance of clarifying,
done 3.3-3.5 focusing and aligning goals and expectations to
achieve outcomes
 Uses formal decision making processes as
scaffolding for thinking, seeking input, advice,
feedback and specialist advice as required
 Uses experience, analysis and intuition to decide
whether an idea is worth developing and
implementing
Version 1.5
Learner Resource
TOPIC 1 – ESTABLISH BUSINESS

CONTINUITY MANAGEMENT
FRAMEWORK
GAIN SUPPORT FOR THE BUSINESS CONTINUITY MANAGEMENT
FRAMEWORK FROM RELEVANT PERSONNEL
Business continuity framework is a set of policies and procedures and activities that the organisation
will need to perform in order to protect itself from a range of internal and external risks.
By creating an effective framework for the organisation to be able to effectively manage its core
operations and other activities in a way that minimises any risk, the organisation will be able to
ensure continuity in operations and safety.
Relevant personnel may include:
 Chief executive officer

 Company board
 Delegated business continuity management officer
 Directors
 Department managers
 Supervisors
 Chief financial officer (CFO)
 Chief operating officer (COO)
 Workplace health and safety officers (WHSO)
Establishing and maintaining and reviewing a business continuity framework for an organisation will
require the support and input of all the stakeholders involved within the organisation.
It will be necessary to ensure that support for the business continuity framework strategy is able to
successfully achieved within the organisation.
Version 1.5
Learner Resource
When gaining support for a new strategy, it will be necessary to ensure that all relevant stakeholders
are aware of the importance and operational function of the business continuity framework.
It will be necessary to ensure that a range of activities are undertaken in order to ensure that
support for the framework can be successfully gained and maintained, these may include:
Communicating the strategy and its importance: It will be necessary to ensure that a range of
communication techniques are carefully planned in order to ensure that all personnel throughout
the organisation will be aware of the importance of the business continuity management
framework. Multiple and varied communication platforms and strategies should be used in order to
ensure full organisational support.
Promoting the strategy: It will be necessary to develop a range of promotional strategies, to ensure
that all personnel; will be able to see and feel the potential benefits to the business continuity
framework.
Consulting with personnel regarding factors that may affect support within the organisation:
Consultation will need to be conducted on all of the different areas that make up an organisations
cultural profile and these include:
 Vision: What is the general makeup of the organisation, its vision, its
missions its main strategic goals and objectives.
 Control systems: This includes all of the monitoring processes and ways that
individuals work within and respond to the organisations control systems.
 Organisational structure: The different types of lines of reporting,
hierarchical makeup and the ways that work and information flow through
the organisation, including the way that groups and individuals respond to
the constraints and opportunities that exist within the structure.
 Power structure: The different types of decision making processes and how
widely spread the power within the organisation is will impact how the Who
makes the decisions, how widely spread is power, and on what is power
based?
 Symbols: This includes the designs and logos and how the individuals within
the organisation feel about them. There are also other symbols within an
organisation that can have a cultural effect such as car spaces, executive
Version 1.5
Learner Resource
offices and executive care spaces that may have an impact on organisational
culture.
 Rituals and routines: This includes any variety of habitual behaviour this
may include items such as management or tool box meetings that happen in
such a way that they are now more habitual than really necessary anymore.
Version 1.5
Learner Resource
DEMONSTRATE CLEAR SPONSORSHIP, RESPONSIBILITY AND

ACCOUNTABILITY FOR BUSINESS CONTINUITY MANAGEMENT
FRAMEWORK
In order to ensure that all members of the organisation will effectively buy into the business
continuity management framework and related strategies, policies and procedures it will be
necessary to ensure that it is clear that the organisation is supporting this concept fully.
Gaining organisation wide support for any strategic plan will take an amount of active promotion to
ensure that all related and relevant personnel and stakeholders, see, feel and believe that the
organisation is while heartedly behind this new strategy and the support and engagement from all
employees is both necessary and beneficial.
Sponsorship: In the internal business environment sponsorship of an idea or strategy is to fully

support and fund a particular aspect of that organisation. It will be necessary for the organisation to
demonstrate through a range of continuous actions that are carried out on all levels of the
organisation that the business continuity management framework strategy is supported fully.
Responsibility: Maintaining accountability and control over the outcomes. It is necessary that there
are clear members within the organisation that are made responsible for the upholding and
management of the business continuity management framework outcomes and management. It will
be necessary to ensure that this feeling of responsibility is transferred throughout the entire
organisation so that the entire organisation will be working towards upholding and managing the
framework correctly to ensure that the organisation will be able to fully benefit from the strategy as
planned.
Accountability: Ensuring that the full responsibility is held and owned by the organisation and its
members. It is important that there is a team that is accountable and can be held to managing the
business continuity management framework in the right way.
Strategies that can be used to demonstrate sponsorship, responsibility and accountability for the
business continuity strategy may include:
 Mission statement: The organisations mission statement is the

organisations promise or statement of commitment to do a particular thing.
When the mission statement reflects the true stance of the organisation on a
Version 1.5
Learner Resource
particular item, this stance will begin to flow down through all the lines of
command within the organisation.
 Organisational objectives: It will be necessary to ensure and that all of the
goals and objectives of the organisation are written to take the business
continuity management strategy into consideration. Staff and stakeholders
will need to see that the organisation is committed to the strategy wholly and
sees it as a vital and core organisational objective.
 Appoint a business continuity management framework team: In order to
establish responsibility and accountability within the organisation with
regards to the business continuity management framework strategy it will be
necessary to ensure that a specific team that is responsible for the effective
development, implementation, and monitoring of the strategy.
o It will be necessary to have a dedicated team that will perform all of the
top line management for the strategy to ensure that they’re a group of
personnel who’s main responsibility is ensuring that all of the required
practices and activities to effectively manage the business continuity
management framework and it related policies, procedures and
strategies.
o The team will need to be formally appointed and this appointment should
be formally announced within the organisation.
 Set boundaries for accountability: There will need to be a set of
parameters and boundaries that the business continuity framework
management, the organisation and its variety of business continuity
framework and personnel will need to be held accountable for upholding
these boundaries. It will be necessary that these boundaries and parameters
are specific and reasonable to ensure that their success will be able to be
measured successfully by a monitoring program.
 Write a range of policies and procedures: All policies and procedures
within the organisation will need to be altered as required to ensure that all
of the interrelated activities within the organisation are aligned with the
business continuity management framework.
 Promote: It will be necessary to ensure that the responsibility, accountability
and sponsorship of the program is promoted throughout the organisation in
Version 1.5
Learner Resource
order to ensure that the commitment to these factors can be clearly

demonstrated throughout the organisation. It is important to ensure that all
of the stakeholders within the organisation clearly understand the benefits,
importance and role of the business continuity management framework and
related strategies.
 Risk management strategies: All risk management strategies within the
organisation must be altered to ensure that they are fully aligned with the
business continuity framework.
There are of course a range of other activities that will assist in ensuring that the message
throughout the entire organisation is a clear and strong commitment to demonstrating that the
sponsorship, responsibility and accountability to the business continuity management framework
consistent.
It will be necessary to develop a range of specialised strategies that will be able to ensure that this
message is clear and reaches all aspects of the organisation.
Version 1.5
Learner Resource
IN CONSULTATION WITH OTHERS, ESTABLISH GOVERNANCE

STRUCTURES FOR BUSINESS CONTINUITY MANAGEMENT
FRAMEWORK, IN LINE WITH SIZE OF ORGANISATION
It will be necessary to ensure that governance structures within the organisation are created in order
to effectively manage that business continuity framework. The extent of the governance structure
will depend on the size and complexity of the organisation in question.
Governance structures: Governance structures are the rules, guidelines, processes and practices
that the organisation uses in order to ensure that activities and actions throughout the organisation
can be effectively controlled. Governance also maintains a balance between all of the needs and
requirements of all of the different stakeholders and departments within an organisation. When
there is a conflict of needs or interests within the organisation it will be necessary for the
governance structure to be able to effectively balance the needs of each party and make a decision
that is fair and appropriate but still in line with the needs of the business continuity management
framework and its related strategies.
Governance structures may include:
 Authorisation processes
 Development and coordination of business continuity management
framework
 Monitoring the business continuity management framework
 Organisational chart showing management functions and reporting
responsibilities
 Tracking and measurement of performance and outcome of the business
continuity management framework
Governance structures will need to be developed and agreed upon in consultation with a range of
relevant personnel from within the organisation.
This will need to be done in conjunction with all of the individuals and groups that are involved in
the organisational change process.
Version 1.5
Learner Resource
Strategies and objectives can be decided upon during a series of activities such as:
 Planning meetings
 Consultation
 Brainstorming sessions
 Strategic analysis of options
 Board meetings
Each of the departments that are involved will need to put forward proposals for each of the
strategies and objectives that they believe are crucial to the development of the organisation.
Consultative processes: Are an extremely important technique that must be widely used during
change management processes. Involving members from all across the organisation has multiple
benefits and these include:
 Using all of the organisations human resources in decision making

 Enacting innovation across the organisation
 Causing feelings of ownership and engagement in organisational decisions
 Generating change across the entire organisation
 Supporting cultural change
 Ensuring employees feel listened to and supported
 Ensuring the changes made are suited to the needs of the individuals and
groups within the organisation
Consultative processes must be used at every stage of organisational development and can make a
large impact in achieving the desired cultural change within an organisation. It is important that
consultative processes are written in the organisational development plan.
Deciding on governance structures: Once all of the information regarding the areas of business that
will need to be developed and according to the needs of the business continuity management
framework strategies have been decided on through strategic analysis of systems and current
strategic plans, it will be necessary to ensure that appropriate governance structures that will be
required in order to ensure that the business continuity management framework can be effectively
controlled as required in order to ensure success of the strategy will need to be decided upon in
consultation with stakeholders.
Version 1.5
Learner Resource
Factors that will need to be decided in terms of governance structures will include:
 Size
 Complexity
 Reporting structures
 Effective controls
 The extent of the governance structure
 How the structure will be managed
 Components to include
 Accountability
 Responsibility
It will be necessary to ensure that all governance structures are agreed upon and formalised as per
the recommendations collected throughout the consultation processes.
Version 1.5
Learner Resource
DETERMINE AND SEEK APPROVAL FOR RESOURCES REQUIRED

TO IMPLEMENT BUSINESS CONTINUITY MANAGEMENT
FRAMEWORK
It will be necessary to ensure that all of the resources that will be required in order to implement the
business continuity management framework are determined. Once all resources are determined it
will be necessary to ensure that seek formal approval from within the organisation in order to attain
these resources.
It will be necessary to conduct an operational needs analysis on the needs of the business continuity
management framework strategy in order to effectively determine all of the resources that will be
needed in order to ensure that complete and effective implementation of the strategy can be
conducted.
There are a range of different resources that may be required and it is important to consider all of
the main resource types when planning to meet organisational needs in a business continuity
management framework strategy.
Resources required in order to effectively implement the business continuity management

framework may include:
 Information: Information is an extremely valuable resource that will need to

be gathered internally and externally to both the organisation. It is essential
to identify all information needs, timing of these needs and strategies for both
collecting and analysing this information. Information may be related to:
o Organisational needs
o Work objectives and tasks
o Staff needs
o Performance needs
o Internal risks
o External risks
o Financial status
o Governance information
o Policies and procedures
Version 1.5
Learner Resource
 Human: Human resources of all personnel that will be involved in the

planning, preparation and delivery of the business continuity management
framework strategy. It is essential that these needs are determined in
advance so that they may be able to be budgeted for and allocated
appropriately.
 Equipment: There will be a range of different equipment that may be
required for the business continuity management framework strategy to be
able to be carried out effectively it is important to create comprehensive
equipment lists, so that these equipment resources and accesses can be
provided prior to them being required.
 Technology: All new and emerging technology will need to be considered
and technology needs will need to be identified so that they may be able to
contribute to the effective implementation of the business continuity
management framework strategy.
 Consumables: These are all of the materials that will be needed throughout
the implementation of the strategy that are considered to be consumable
these could be related to paper, printing products, materials and other items
that will be used throughout the creation and management of the business
continuity management framework.
Once all of the required resources have been identified it will be necessary to follow organisational
procedures when placing resource acquisition requests.
Effective resource acquisition requests will require submissions that describe realistic options,
benefits, costs and outcomes presented in a way that proves that the resource acquisition request
has been seriously considered and will assist the organisation in achieving its goals and objectives.
Resource acquisition requests must be based on facts and figures. Information and data can be
collected from a variety of different departments to support your proposal. Data to support
resource proposals could include information collected from:
 Colleagues
 Clients
 Suppliers
Version 1.5
Learner Resource
 Other departments
 Other Stakeholders
 Shareholders
In determining and supporting the need for new resources, you will need to analyse all of the
information collected and ascertain the gap between the current situation and the desired situation.
Once this gap has been ascertained, then you can begin to develop options for how to close this gap.
With all business options there will be costs, benefits and risks involved. To support effective
resource acquisitions, it is important to demonstrate that all of these factors have been considered
information explaining them should be provided so that appropriate decisions can be made.
Resource proposals will need to contain the following information:
 Resources required
 Reasons for the acquisition
 Department that requires the acquisition
 Total cost of the acquisition
Approvals will need to be filled out on appropriate templates and submitted to authorised personnel
within the required timeframe.
Version 1.5
Learner Resource
SUPPORT RELEVANT PERSONNEL TO IMPLEMENT BUSINESS

CONTINUITY MANAGEMENT FRAMEWORK
It will be necessary to ensure that appropriates levels and types of support are provided to
personnel throughout the implementation of the business continuity management framework
strategy.
Implementing an organisational wide strategy will take a range of coordinated and complex actions.
It will be necessary to ensure that all personnel are provided with reasonable levels of support to
ensure that they are able to conduct implementation tasks as required.
Provide required information: The first method of support that personnel will need to have in order
to ensure that all of the information that they require in order to successfully implement business
continuity management framework strategies.
Information required may include:
 Strategies
 Governance structure information
 Policies and procedures
 Management structure information
 Resource allocations
 Approvals and requirements
 Change management procedure information
 Implementation strategies
Provide required training: It will be necessary to ensure that all relevant personnel receives the
training and support that they require in order to effectively implement the business continuity
management framework and related strategies.
Required training may include:
 Risk management
 Strategy implementation
 Business continuity management framework
Version 1.5
Learner Resource
 Governance
 Internal control
 Communication strategies
 Change management
Provide resources: It will be necessary to ensure that all relevant personnel have access to the
resources that are required in order to successfully implement the business continuity management
framework and related strategies. It is essential to show support to all relevant personnel
throughout the business continuity management framework and related strategy by ensuring that
staff have access to the resources that they require to ensure that all tasks can be completed as
required.
Provide access to specialist advice: It may be necessary to ensure that personnel have access to
specialist advice as required throughout the strategy implementation process within the
organisation.
Specialist advice may be in relation to:
 Corporate governance
 Risk management
 Change management
 Legal advice
 Human resources
 Financial advice
 Other specialist requirements
Provide regular opportunities for collaboration: It may be necessary to further support personnel in
implementing the business continuity management framework and related strategies by allowing
them structured time to collaborate with each other and upper management.
Version 1.5
Learner Resource
Opportunities for collaboration may include:
 Team meetings
 Working together on projects
 Consultation
 Planning meetings
 Support groups
 Training sessions
Provide them with the time required: It may be necessary to ensure that relevant personnel are
provided with the time that they require in order to successfully complete the business continuity
management framework tasks.
Methods for ensuring that relevant personnel have the time that they require to complete
implementation tasks may include:
 Workload reallocation
 Job redesign
 Extra support staff
 Scheduling
 Time allocations away from other tasks
When supporting relevant personnel to successfully complete business continuity management

framework tasks into the organisation it will be necessary to ensure that regular communication is
conducted so that the personnel will have the opportunity to make requests for further support that
they may require.
Version 1.5
Learner Resource
ESTABLISH A MANAGEMENT SYSTEM FOR ORGANISATION’S

BUSINESS CONTINUITY MANAGEMENT PROGRAM
It will be necessary to ensure that a structured and appropriate management system for the
organisations business continuity management framework and it related strategies are effectively
established within the organisation.
Managing a business continuity management framework across an entire organisation will require a
range of different management systems in order to ensure that all of the tasks and activities that are
required for the success of the program can be successfully conducted.
A management system is the collection of policies, procedures and processes that the organisation
will use in order to ensure that the business continuity management framework will be able to be
effectively implemented, managed, monitored and actioned within the organisation.
Policy: Policies are statements of intent and an organisations position on a particular issue.
Action plans for the policy: Action plans identify each of the business goals that exist within the
business continuity management framework and the individual strategies that could be
implemented in order to successfully achieve that goal.
Action plans then explain and set out in detail the action that need to take place in order to achieve
these goals.
This includes all of the relevant information required to set out and achieve that goal including:
 Financial plans
 Promotional strategies
 Resource requirements
 Risk management issues and strategies
 Specific actions, initiatives and tasks to be undertaken
 Staffing/responsibility requirements and arrangements
 Timelines
Version 1.5
Learner Resource
Introduction: There should be an introduction written for the actions plans held within the business
continuity policy and this should explain the organisations roles and functions and how the action
plans will improve enable these processes. The introduction of the actions plan will explain how each
of the action plans will contribute to the achievement of the business continuity management
framework goals.
Management: This section will detail all of the identified barriers to continuity that is caused by risk
issues within the workplace. Detail the monitoring and evaluation process that has been developed
for the Action Plans. An explanation of when, how and by who; policy action plans will be reviewed.
Action Plans: It is important that action plans are written in clear and plain English with all
terminology explained and jargon and other technical explanation should be avoided. Action plans
should also be written using the SMART acronym. Action plans written using the SMART acronym
will be:
 Specific: plans have a much greater chance of successful completion than

general tasks or goals. For a task to be considered specific, it will need to
answer the six “W” questions. Who, What, Where, When, Which and Why.
 Measurable: plans are those that specify the criteria on which success is
determined. Detailed criteria must be clearly communicated to ensure that
the plan can be achieved as required.
 Attainable: it is important to set out steps that make the plan attainable. If a
plan has a clear explanation of how it can be achieved, it is more likely that
they will be successful.
 Realistic: to be considered realistic the plan must be realistic. All steps in the
plan, including timeframes, need to be reasonable.
 Timely: the action plan should contain specific start and end dates, as well as
measurable miles stones. So that progress towards the completion of the
action plan can be successfully measured, and so that all personnel are aware
of when the goals of the plans should be achieved by.
Procedures: Business continuity management framework management systems will require specific
procedures to be made based on the policies and actions plans created for the management system.
These will describe the exact step by step actions that will need to be undertaken at all levels of the
organisation.
Version 1.5
Learner Resource
It will be necessary to create a range of management system monitoring and quality processes, this
will include:
 Efficiency measures: These measures are cost and productivity measured as

a percentage of inputs vs. outputs. Examples of efficiency measures include
measurements of job tasks and time taken to achieve them.
 Outcomes measures: These measures show if targets have been reached
and show the benefits and impacts that the business continuity management
strategy has made.
 Quality measures: These measures show the effectiveness of expectations
and an improvement in accuracy, reliability, competence, responsiveness and
compliance.
 Recording and reporting: Recording and reporting systems will need to be
created for all areas of the business continuity management framework and
its related management system to ensure that effective governance and
internal control procedures are able to be carried out.
Version 1.5
Learner Resource
SEEK MANAGEMENT APPROVAL OF ORGANISATION’S BUSINESS

Once the planning and preparation phases of the business continuity management framework has
been created it will be necessary to seek management approval of the framework that has been
designed.
In order for the business continuity management framework to be able to be implemented into the
organisation, it will need to be formally approved by the higher level management of the
organisation.
Management may include:
 Chief executive officer

 Company board
 Delegated business continuity management director/officer
 Department managers
 Directors
 Supervisors
All organisations will have a formal approvals process that must be followed. When implementing an
organisation wide framework, there are a lot of factors that must be considered prior to the
implementation taking place.
Management will need to be provided with an opportunity to review all of the proposals and
documentation that has been created in relation to the business continuity management framework
in order to ensure that it meets a range of the organisations’ needs.
Organisational needs may include:
 Organisational goals and objectives

 Suitable governance structures
 Suitable management structures
 Costs requirements
 Resources requirements
Version 1.5
Learner Resource
 Compliance requirements
 Stakeholder approval
 Legislative requirements
 Risk management requirements
 Timeframe requirements
 Certain levels of complexity
 Certain levels of flexibility
 Certain levels of adaptability
When providing information to management to ensure that appropriate approvals can be attained
based on accurate and relevant information it will be necessary to ensure that the following
documentation is submitted with the application for approval to the business continuity
management framework:
 Governance structures
 Management system documentation
 Risk analysis
 Financial analysis
 Resource acquisition requests
 Policies
 Actions plans
 Procedures
 Support plans
 Communication strategies
Then seeking approval for the implementation of the business continuity management framework
from higher management within the organisation it is essential to ensure the following:
 Complete and accurate information is provided

 All requested explanations and information are provided as requested
 All formal approvals processes are followed
 All required timeframes are met
Version 1.5
Learner Resource
 All documentation and information provided is done so in the requested

format
 All documentation and information submitted is done so through required
channels
Once all of the documentation and information that has been requested as a part of the approvals
process has been submitted, management will deliberate over the approval. There may be further
requests for information or explanations and these must be provided as requested within the
timeframes that are specified throughout the approvals process.
Management may require changes to be made to any aspect of the business continuity management
framework or its related documentation. If this occurs, it will be necessary to ensure that all changes
that have been requested are conducted as required and that all changes are resubmitted to
management for final approval.
Approval is likely to be provided in writing and may include some conditions it is essential that all
documentation regarding the approvals process and the approval itself are maintained in a secure
location in case they are needed in the future.
Version 1.5
Learner Resource
TOPIC 2 - MONITOR BUSINESS

CONTINUITY MANAGEMENT
FRAMEWORK AND STRATEGIES
DEVELOP AN APPROPRIATE CYCLICAL REVIEW PROCESS FOR
MONITORING BUSINESS CONTINUITY MANAGEMENT
FRAMEWORK
A major part of ensuring the success of the business continuity management framework includes
developing an appropriate cyclical review process that can be used as a monitoring tool for the
framework.
There are a large range of different cyclical review tools that can be used and the organisation can
choose to design a new one to suit the exact business needs or to adapt or adopt an existing
process.
All cyclical review tools, however, have one thing in common and that is that are designed in a circle
that allows a cycle of reviews and improvements.
Continuous/Continual improvement process: Continuous improvement which is sometimes called

continual improvement is a cyclical review process that is used in many organisations. This tool uses
small and continual improvements that are integrated on a rolling system. The benefit of using a tool
like this is that the organisation will not need to spend many months reviewing and then
implementing major changes to the business continuity framework as reviews and changes will be
constant and small, meaning that the organisation will be improving constantly but in a manner that
is organic and simple.
There is more than one of these continual improvement processes that can be implemented within
the organisation although the most commonly utilised tool is the for stage process known as PDCA
or:
 Plan: Constantly review all processes and tools to effectively identify the
need for change, plan for the change or the improvement.
 Do: Implement the change on a portion of the organisation.
Version 1.5
Learner Resource
 Check: Assess the change to determine its success.

 Act: Implement the change across the organisation.
Other types of continual improvement work more on a rolling system, they will include a process
such as:
 Review as you go
 Identify
 Record
 Investigate
 Plan for improvement
 Implement
 Review as you go
As long as the plan is structured and provided the organisation with the results that it needs most
continual improvement plans will be successful, but it is important that they exist under a range of
controls and are implemented across the entire organisation.
Traditional cyclical review: This is a traditional process of reviewing all data, planning for change,
assessing the results and making adjustments and then at a specific time in the future commencing
the cycle again. The issue with this type of cyclical review is that it is labour intensive and relies on
large waves of change being applied to the organisation at specific times. This can take the focus of
the running and maintain the business and place it on the review process which may actually place
the organisation under a level of increased pressure and risk.
Hoshin policy deployment cycle: The Hoshin cycle is a process that is implemented throughout the
organisation and then based on an annual review that includes a round of smaller changes across
the entire organisation. The Hoshin review was design by Professor Yoji Akao in the 1950s and is
based on the theory that all of the jobs and tasks within the organisation are equally important and,
therefore, the entire organisation should be involved in the policy implementation, and quality
management aspects of an organisation.
Hoshin policy deployment cycle works by making all workers across the organisation responsible and
accountable for the management and improvement of the organisation on a whole.
Version 1.5
Learner Resource
It relies on teamwork, communication and all parties striving towards a shared goal. Hoshin reviews
will be conducted annually and will involve a deep level of investigation into the challenges and
successes of the previous year. Each employee or department manager will be involved and a review
and a spate of improvements and assessments will follow. This will be repeated each year as a cycle.
The Hoshin cycle can also be implemented in the form of continual improvement and can be
adapted to allow smaller reviews and changes more often or incremental continuous change as with
other continuous improvement cycles.
Selecting the appropriate strategy: When selecting the appropriate cyclical review process for an
organisation it will be necessary to consider current management techniques and styles, the
complexity and size of the business continuity management framework and the organisation itself.
Version 1.5
Learner Resource
PROVIDE RELEVANT PERSONNEL WITH INFORMATION

RELATING TO CYCLICAL REVIEW PROCESS FOR BUSINESS
When implementing an appropriate cyclical review process into an organisation there is a range of
information sharing and other activities that must take place in order to ensure that the selected
review process is able to do the job that it set out to achieve.
Relevant personnel: Determining which of the personnel that are will need to be provided with
information regarding the cyclical review process for the business continuity management
framework will depend on a variety of factors including:
 Size of the organisation

 Management structures
 Size and complexity of the business continuity management framework
 Size and complexity of the cyclical review process selected
It will be necessary to conduct a range of information sharing activities including:
Provide all relevant personnel with the outline of the business continuity management
framework: It will be necessary to ensure that all of the staffs have a range of information regarding
the business continuity management framework and related strategies including:
 Purpose of the business continuity management framework

 Guidelines of the framework
 Management structure of the framework
 Business continuity management policy
 Business continuity management framework action plans
 Business continuity management framework procedures
 Information related to how the business continuity framework will be made
accountable
 Resources
 Templates
 Reporting structure
 Recording structure
Version 1.5
Learner Resource
 Learning and development opportunities
Provide all relevant personnel with the outline to the governance structure for the business
continuity management framework: It will be necessary to ensure that all of the personnel have a
range of information provided to them in relation to the governance structure including:
 Purpose of the governance structure

 Reporting lines
 Lines of authority
 Management guidelines
 Reporting structures
Provide information regarding the structure of the cyclical review process for the business
continuity management framework: It will be necessary to ensure that all of the relevant personnel
will have all of the required information that will enable them to understand how the cyclical review
process will work and what actions will need to be undertaken by them in order to ensure its
success.
Information that will be required in order for personnel to be adequately informed regarding the
cyclical review process may include:
 Process overview
 Process purpose
 Action plans
 Procedures
 Procedure maps
 Reporting lines
 Schedule of review
 Timeline
 Benchmarks
 Quality indicators
 Review processes
 Templates
 Documents
 Improvement processes
Version 1.5
Learner Resource
Training required for relevant personnel: It will be necessary to ensure that all personnel receive
sufficient training in how to conduct the actions required in the cyclical review process.
Training may include:
 Group work
 Presentations
 Formal training sessions
 Work activities
 Coaching
 Mentoring
It is essential to ensure that all relevant personnel have all of the required resources and information
in order to ensure that they will be able to perform all cyclical review processes in an appropriate,
thorough and timely manner to ensure that all activities that are conducted within the cyclical
review process will be focused on improvement the business continuity management framework at
each phase of the process.
Version 1.5
Learner Resource
DEVELOP AND SEEK APPROVAL OF TOOLS TO VERIFY AND

VALIDATE BUSINESS CONTINUITY MANAGEMENT FRAMEWORK
ACTIVITIES, PROCESSES AND PLANS, APPROPRIATE TO THE
ORGANISATION
It will be necessary to develop and seek approval of a range of tools that can be used to verify and
validate business continuity management framework activities.
Aspects of the business continuity management framework that need to be verified may include:
 Strategy
 Plans
 Processes
 Activities
 Action plans
Feedback: Surveys that collect feedback are an essential tool for gauging both what we are doing
well and what we could be doing better in relation to the business continuity management
framework.
Surveys and feedback can be collected using both formal and informal methods.
Surveys can be conducted by:
 Telephone
 Mail (post)
 Online surveys
 Individual one on one surveys
 Group surveys
It is important that surveys are written in a way that collects both qualitative and quantitative
information. Questions should be carefully written in order to ensure that you are collecting honest
and relevant information regarding the ongoing satisfaction and support of the business continuity
management framework.
Version 1.5
Learner Resource
Surveys should be developed with a clear aim in mind and also in conjunction with members from
the organisation developmental change management team and other key stakeholders to ensure
that they are not biased to show support that may not exist for the ongoing business continuity
Measuring benchmarks: When the business continuity management framework strategies were
developed and implemented there will have been a range of benchmarks set in order to successfully
measure the success of the program. These will have been specific to the different departments
within the organisation. It will be necessary to ensure that a range of tools are developed that can be
used to effectively measure the actual performance of the organisation against the pre-set
benchmarks for the business continuity management framework and related strategies.
Tools that can be used to measure benchmarks may include:
 Risk assessment
 Internal Audit
 Analysis of data
 Analysis of performance
 360 analysis
 Budget review tools
 Risk analysis
 Performance review tools
 Productivity analysis
 Efficiency measurements tools
 Validation of processes
 Validation and assessment of process maps
 Process review
 Risk monitoring tools
 Performance monitoring tools
 Quality management tools
Forecasting and projections: A financial forecast is a financial plan or budget that is used to
create projections for a business. The forecast is divided into sections such as sales forecast,
expense forecast, cash flow forecast and cost of goods and services. These figures are compiled
by examining historical financial data and current trends in a given marketplace. The forecast
Version 1.5
Learner Resource
will give a clear indication of the viability of the plan and projected outcomes. These figures will
give an idea of what is to come but should be continually monitored and periodically updated to
reflect the actual happenings that affect the plan. Items such as the cost of materials,
oversaturation within a market or reduced market value can drastically change the relevance of
the plan and should be taken into consideration during these periodic adjustments.
Financial Forecasts are essentially the predictions of a businesses’ income and expenses, while
Projections are an educated guess as to what the businesses’ bottom line will be. The bottom
line is known as the net profit for the business. Net Profit is the combination of balance sheets
with a profit and loss statement. The balance sheets and profit and loss statements, which are
also known as the projection forecast are created by combining all sections of the financial
forecast. This is arguably the most important section of the plan because, although every other
section has an effect, the bottom line shows whether or not the plan is producing a profit.
Forecasting and projections should be showing a decreased level of risk within the organisation as a
direct result of the business continuity management framework and related strategies. It will be
necessary to assess past projections against current ones to measure the impact of the business
Version 1.5
Learner Resource
CONSULT WITH RELEVANT PERSONNEL ABOUT THE

IMPLEMENTATION OF BUSINESS CONTINUITY MANAGEMENT
FRAMEWORK
Consultation is an extremely important step in managing the business continuity management

framework implementation processes. It is essential that all opportunities for effective consultation
are identified and implemented as required.
Consultation on business continuity management framework implementation has two main benefits
and these are:
 Consultation seeks information from all key individuals and groups within
the organisation on so that is may understand the opinions, desires, needs
and expectations of key stakeholders so that the business continuity
management framework strategy can be implemented in a way that
successfully addresses all of these needs.
 Consultation actively engages and involves members from all over the
organisation and encourages them to become involved and participate in the
business continuity management framework implementation process.
So by conducting successful consultation you will not only be able to collect vital information to
inform on business continuity management framework implementation but you will be maximising
stakeholder engagement and participation at the same time.
It is often discussed that the failure of business continuity management framework implementation
and their acceptance within an organisation is due to the fact that consultation was not conducted
successfully or at all and this can result in poorly focused plans that do not meet the needs of the
stakeholder groups and individuals and also a poorly engaged and resistant workforce.
Resisting change is a natural human behaviour and when you actively engage individuals within
planning and change processes they become a part of the change and feel a sense of power and
responsibility, therefore, are more likely to advocate and support the change process on a whole.
There are many different methods that can be used for consultation and these include:
Version 1.5
Learner Resource
Open Developmental Plan Meetings: Stakeholders and key individuals are invited to come to a
meetings or series of meeting where they will be informed about the item they are being consulted
on. Consultation views and information can then be collected from the participants using a variety
of methods including:
 Discussions
 Surveys
 Brainstorming
 Group exercises
 Consultation forms
Surveys on business continuity management framework implementation: Stakeholders may be

invited to complete a survey in written or online form with carefully worded questions regarding
their needs, expectations, concerns, and opinions regarding different aspects of the business
continuity management framework implementation. Good surveys will ask for both qualitative and
quantitative information.
Focus Groups on business continuity management framework implementation: These are a

collection of small group meeting where participants are shown various pieces of information and
asked a series of questions regarding their opinions and thoughts on the items at hand. Focus groups
tend to include both individual and group responses to questions and some group discussions. These
are a great way of taking an in-depth look into a particular aspect or scenario in relation to business
continuity management framework implementation processes, objectives and outcomes.
Invitations to submit written responses on business continuity management framework

implementation: These are useful when there are written reports or draft or even final copy
business continuity management framework implementation plans or related strategies and actions
plans that can be reviewed and a written response or report can be created in response. This is
generally useful for senior management and change management teams or other expert decision
making personnel.
Informal Developmental Plan Meetings: This is where you may invite a large group and ask them to
watch a presentation and then mingle with the guests and have a series of informal discussions and
chats, this is a good method for getting very honest opinions regarding the feelings and needs of the
stakeholder groups in a non-confronting atmosphere.
Version 1.5
Learner Resource
Consultation should be conducted at every stage of the business continuity management framework
implementation.
Examples of when consultation could be beneficial include:
 Strategic analysis of current strategies and action plans

 Determining which areas in the organisation are under performing
 Identifying options for improvement
 Planning communication and training strategies for business continuity
management framework implementation
 Agreeing on options for business continuity management framework
implementation
 Determining new changes across the organisation
Consultation strategies and plans should be formally planned for the best outcome and written into
the business continuity management framework implementation plans. It is important that all
participants of the consultation process feel supported and able to give honest answers regarding
the implementation.
Version 1.5
Learner Resource
MONITOR BUSINESS CONTINUITY MANAGEMENT FRAMEWORK

LEARNING, DEVELOPMENT AND EXERCISES ACROSS
ORGANISATION
It will be necessary to ensure that a range of learning and development exercises are created and
then monitored for success in relation to the business continuity management framework.
It is a worthwhile strategy to undertake team development and training activities that can assist
your workforce in developing collaborative approaches to both managing the business continuity
management framework. The skills and knowledge of your team should be continuously updated
and providing a range of training ad team development opportunities is a great way to increase the
skills they will need in order to collaborate effectively assist in risk reduction processes and cyclical
review within the workplace.
There are a variety of different team activities and training that could be undertaken to best
enhance the skills of your team in the areas of the business continuity management framework.
Learning development and training activities may include:
Seminars: Seminars can be an effective manner of providing large groups of people with information
relating to the business continuity management framework. Seminars are a good opportunity to
present new strategies and procedures to personnel.
Presentations: Presentations may be given across the organisation in relation to the a range of
different factors in relation to the business continuity management framework.
Computer-based training: Participants could be given a learning activity that involves a series of
information presented in a logical manner and then a series of questions and answers or activities
that pertain to the information. They could also play games and perform problem-solving activities
that build their ability to think logically and laterally.
Group work: Group work can be given to participants so that they have to work together on team
projects which involve problem-solving activities in a group environment. Or activities and games
can be played that can build skills and knowledge regarding:
 Group cohesion
 Problem solving
Version 1.5
Learner Resource
 Teamwork
 Team communication
 Allocation of tasks
 Conflict resolution
 Strategy development
 Risk management
 Business continuity management principles
One-on-one sessions: One-on-one sessions can be planned and carried out that build on the
participants’ knowledge of what risk management and the business continuity management
framework and how these things can be utilised to effectively manage the security and continuity of
the organisation. One on one sessions can be beneficial as you can focus on the individual that you
are training and can easily monitor their progress which is sometimes more difficult in a group
environment.
Informal coaching: is a great tool to enhance business continuity management framework tasks,
when it is combined with other methods of training and development. Informal coaching can
provide the opportunity for ongoing feedback and re-direction as required throughout the learning
and skills development process.
Mentoring: Assigning a buddy or mentor to your personnel is a great way of both causing the
mentor to further develop their own skills and also to provide the participant with ongoing support
and assistance throughout their own development in relation to the business continuity
It is important to write a learning development and training strategy for enhancing the teams skills in
relation to the business continuity management framework in a way that is continuous and varied so
that the training is relevant and engaging and also informative.
Assistance in planning targeted training and development strategies can be sought from:
 Human resources experts

 Learning and development experts
 Key stakeholders
 Participant consultation
Version 1.5
Learner Resource
 Risk management training experts

 Business continuity training experts
Planning these strategies in collaboration with the team members and other relevant stakeholders
will also assist in the engagement and uptake of the program and in ensuring that the training and
development program meets the needs and skill level of the individuals and groups that will
undertake the training.
Version 1.5
Learner Resource
TOPIC 3 - REVIEW AND EVALUATE

BUSINESS CONTINUITY MANAGEMENT
FRAMEWORK AND STRATEGIES
REVIEW AND ANALYSE REPORTS ON BUSINESS CONTINUITY
MANAGEMENT FRAMEWORK LEARNING AND DEVELOPMENT
EXERCISES
When a large amount of time and resources are put into learning and development across an
organisation, the management team will want to see how their money and time are being spent.
It will be necessary to collect, review and analyse a range of reports that can be collected from
within the organisation in relation to the performance of the learning and development strategies
that have been implemented throughout the organisation in relation to the business continuity
There are two main categories of reports that may be analysed in order to determine the impact of
the learning and development strategies and activities and these are:
Direct: Reports from the direct group are reports that pertain directly to the results from the
learning and development strategies. These may include reports such as:
 Assessment results
 Practical tasks
 Training observation records
 Feedback from training
 Test results
Indirect: Reports from the indirect group are other reports from within the organisation that are not
directly related to the learning and development activities that are conducted within the
organisation but that can demonstrate the impact that these strategies have had on the
organisation. These may include reports such as:
 Wastage
Version 1.5
Learner Resource
 Productivity
 Efficiency
 Performance reviews
 Risk analysis
 Business continuity impact reports
Analysing the results of direct reports: When analysing, the results of direct reports, in relation to
the business continuity management framework learning and development strategies it will be
necessary to focus the intent of the analysis on the results that are being achieved by the training.
It will be necessary to look at measurements of personnel understanding of the business continuity

management framework before and after the training and to take note of the statistical results that
are being achieved by these programs. It will be necessary to determine:
 Is the training effective?

 Is the information understood?
 Is the information comprehended?
 Is the information retained?
 Do the participants enjoy the training?
 Do the participants feel confident in performing the tasks that have been
asked of the in relation to the business continuity management framework on
completion of the training?
Analysing the results of indirect reports: When analysing, the results of indirect reports it will be
necessary to look for improvements that have occurred in a range of areas in relation to the
management of the business continuity management framework. When analysing this type of data
it will be necessary to identify a range of trends using tools such as line graphs and mathematical
equations.
A trend line is a chart that shows a line that is drawn over amounts that are measured at time
intervals to show the rate of growth or decline in a particular area.
Trend lines can be created over time by analysis of historical business performance in the
following areas:
Version 1.5
Learner Resource
 Increases in performance
 Decreases in risk
 Increases in compliance
 Decreases in incidents
Proportion analysis shows us the difference in size between different areas throughout these
trends, for example, the ratio between performance and learning and development strategies
throughout different time periods. This will help to determine the impact that the training has
made on the management of the business continuity management framework and related
strategies.
Version 1.5
Learner Resource
REVIEW AND ANALYSE THE ORGANISATION’S COMMUNICATION

STRATEGY AND IMPLEMENT CHANGES
When implementing a communication strategy in relation to ensuring that all of the required
information that needs to be communication for the success of the business continuity
management framework it will be necessary to develop a communication plan in conjunction
with company policies and procedures. Consultation with your project team members is critical
when developing a communication plan.
An effective communication plan can be developed by following the process below:
Step 1 – Establish your overall communication objectives, what do you want to communicate
and why, what things would you like to avoid. Examples could be:
 Clear and effective communication tailored to the different parties

 Regular communication
 Communication that engages and encourages
 Avoid miscommunication
 Avoid forgotten communication
Step 2 – List and define all of your audiences. You will need to communicate with a variety of
different people, and each of these communications will have different goals attached to them.
List and explain each of your different audiences and each of their objectives.
Step 3 – Choose a communication method for each of the different audiences. These may vary
depending on the message but there will be preferred channels and styles of communication.
Select several different channels for the different types of messages you may need to
communicate.
There are many different channels that can be used for corporate communication these include:
 Emails
 Newsletters
 Informal discussion
 CEO briefing
 Teleconference
 Skype
Version 1.5
Learner Resource
 Notice boards
 Social media
Ensure that you select the appropriate style for each message and audience.
Step 4 – Plan the message for each audience. Consider the following questions:
 What is it that needs to be communicated to this audience?

 When will need to be communicated to this audience?
 What is the regular or preferred channel of communication for this audience?
 For this particular message what is the best way to get this message across?
Step 5 – Place all of your findings into a communications plan template. See example below:
Communications Plan For……………………
Overall Communication Objective:
Audience Communication Message Channel Timing

Objectives

Step 6 – Monitor the effectiveness of the plan for seeking the views and opinions of people
within various work teams. How was the message received? Were there any complications? Ask
the various audiences how they thought the communication went and if they would like to
recommend any changes.
Version 1.5
Learner Resource
Step 7 – Apply any changes that you have decided to make to the plan after the monitoring
phase and regularly update as a part of continuous improvement.
After each communication ask yourself: “did that method and style of communication result in
your desired outcomes?, and Did you achieve your communication objectives successfully?” If
the communication plan is:
 Within the organisations guidelines

 In consultation with team members and other stakeholders
 With clear objectives in place
Then your planned communication has the greatest chance of success.
Version 1.5
Learner Resource
REVIEW AND UPDATE THE OVERALL BUSINESS CONTINUITY

MANAGEMENT FRAMEWORK ACTIVITIES, PROCESSES, PLANS
AND RESOURCES ACCORDING TO RESULTS PRE- AND POST-
ACTIVATION
When managing the implementation of an organisation-wide strategy such as a business continuity

management framework into an organisation there will be a large range of risk mitigation and
reviewing tasks that will need to be conducted in order to ensure that the activities and tasks that
are conducted as a part of the business continuity management framework.
It will be necessary to ensure that a range of resources are used when performing a review of the
business continuity management framework.
Resources may include:
 Critical written and/or electronic records

 Emergency services
 Facilities and/or accommodation
 Finances
 Information technology infrastructure and applications management
 Insurance
 Media relations/communications officer
 Outsourced services
 Personnel/human resources
 Plant and equipment
 Premises
 Telecommunications
 Salvage crew
 Training personnel
It will be necessary to ensure that a range of results that are collected during the investigation into
the above results. It will be necessary to determine how the business is performing in relation to the
implementation of the business continuity management framework.
Version 1.5
Learner Resource
Business continuity management frameworks are designed to ensure that the business is protected
from a range of risks that it may be exposed to as a result of conducting business activities.
The business should be seeing an increase in:
 Efficiency
 Risk management
 Compliance
 Productivity
 Returns
 Staff retention
 Staff training results
 Decision making
 Responding to the external environment
The business should be seeing a decrease in:
 Risk exposure
 Staff losses
 Mishaps in communication
 Errors
It will be necessary to perform a range of monitoring techniques including:
 Trend analysis
 Reports analysis
 Performance analysis
Once the results of the review of the business continuity management framework have been
collected and analysed it will be necessary to ensure that all of the actions, plans and strategies that
have been implemented across the organisation will need to be improved as required so that the
business continuity management framework will be able to have the impact on the organisation that
was intended by the program.
Version 1.5
Learner Resource
This type of review should be conducted in addition to the cyclical review process, it is an excellent
tool to inform stakeholders of the successes and challenges that the organisation is facing as a result
of implementing the business continuity management framework.
Version 1.5
Learner Resource
ANALYSE AND INTEGRATE ORGANISATION’S BUSINESS IMPACT

ASSESSMENT/S AND IDENTIFY DEPENDENCIES AND
INTERDEPENDENCIES IF APPLICABLE
Once a new policy has been implemented in an organisation no matter what that policy is about, you
will need to analyse, identify and assess the impacts of that policy. It is not good business practice to
implement a policy and then just assume that all of the intended impacts that you were expecting
from the policy have occurred and to the correct level and that there will be no other impact from
the policy implementation.
Business continuity management framework policies are company-wide and have impacts on many
aspects of the organisation. Some you will have expected and some you may not have. An
organisation is a large and complex system and within it are many smaller systems, policies,
procedures, departments and individuals that all work together in order to achieve the overall goals
of the company. Some of these sections of the business work almost independently of each other
while others are reliant on or interdependent of each other. Due to this, when a new policy or
procedure is implemented in an organisation it is not always possible to know exactly what all of the
impacts on the organisation will be.
It is important to take steps to identify what all of the impacts of your diversity policy have been.
There will be two different types of impacts that will occur within your organisation and these are:
Intended: These are the impacts that were intended and expected. The intended impacts of the
business continuity management framework may include:
 Decreases in risk exposure

 Increases in efficiency
 Increases in compliance
Unintended: Unintended impacts are side effects or other impacts that may have been inadvertently
caused by the implementation of the business continuity management strategy. These may include
circumstances, barriers and/or interruptions that will disrupt, damage or inhibit the continuation of
critical business functions. Unintended impacts may include:
 Increased risk exposure

 Process issues
 Interrelated departmental process conflict
 Communication breakdown
Version 1.5
Learner Resource
 Conflicting actions
It will be necessary to ensure that these factors are able to be identified so that steps may be taken
to minimise any negative impacts.
It is important to remember however that not all unintended impacts will be negative and
occasionally there will be a range of positive unintended impacts which should be recorded so that
they are able to be considered in future planning activities.
There are a range of monitoring and reviewing activities that can be conducted in order to effectively
minimise unexpected negative impacts.
Unintended impacts can be minimised by:
 Fine-tuning the business continuity strategy

 Enforcing benchmarks
 Investigating new options
 Enhancing continual improvement
Organisations run based on a range of range of systems, actions and communications, it will be
necessary to be aware of how all of the departments functionality, including existing data and
information systems and internal and external dependencies and interdependencies. It will be
necessary to take into consideration the organisations past and current internal, external and
industry disruptions.
It will be necessary to take into consideration the organisation’s policies and procedures relevant to
the business continuity management framework, including risk management strategy.
Organisational structure: The manner in which an organisation is structured will greatly impact the
way that monitoring and financial management and decision making will take place. It is important
to take the structure into consideration. Organisations with a flat structure will make quicker
decisions and have less lines of authority while pyramid style management structures that have
intricate and multiple lines of authority will need to have a management style that ensures that all
decisions and approvals are made by the appropriate people.
Version 1.5
Learner Resource
Lines of Authority: Lines of authority will vary from organisation to organisation and will depend
greatly on the structure of the organisation. It is essential to ensure that all lines of authority are
taken into consideration throughout all business continuity management framework monitoring and
decision making processes.
Principles of risk management and business continuity management framework: It is essential that
all internal control procedures are designed to ensure that the principles of risk management and
budgetary control are upheld as required. The principles of risk management are:
 Value creation
 Structure
 Internal control
 Monitoring
 Evaluation
 Structure
 Systematic
 Informed
The relationship of the business continuity management framework to other business processes is
that all of the processes within the organisation will be related in some way to the business
Version 1.5
Learner Resource
IMPLEMENT AND CONDUCT BUSINESS CONTINUITY

MANAGEMENT PROGRAM AUDITS
It will be necessary to ensure that a range of internal audits are conducted within the organisation in
order to ensure that all aspects of the business continuity management framework are working as
intended.
Internal audits that are performed within an organisation add a lot of value to an organisation's risk
management and financial systems management procedures. Internal auditing is an internal
consulting and testing practice that an organisation uses to improve and control its operations. It
brings a systematic and disciplined approach that improves internal governance and control.
Value-added audits and risk assessments aim to:
 Perform objective analysis of operations

 Examine and evaluate all functions, systems and activities within the internal
and external value chain of an organisation
 Assist an organisation in achieving audit objectives
 Assist an organisation in achieving objectives and goals
 Assess in a systematic and disciplined manner
 Improve the effectiveness of risk management, governance and control
procedures
Value chain risk assessment audit challenges include the effective management of the audit to
ensure consistent and high-quality practices at all times. It is important for auditors to ensure that
they carefully analyse and interpret all quality and risk indicators and select appropriate evidence in
order to ensure that processes are correctly assessed and appropriate. Value chain risk analysis
requires a high level of audit and skill competence in the auditor and the auditor must ensure that
they have a high level of understanding of the people, systems and processes that are undertaken
within an organisation.
It will be necessary to perform a range of internal audits on the following systems in relation to the
business continuity management framework including:
 Reporting
 Recording
 Communication
Version 1.5
Learner Resource
 Documentation
 Impacts
 Risk
 Productivity
 Compliance
 Governance
 Management Structures
Auditing is the process of investigating and tracking all of the systems and processes throughout the
organisation in order to search for errors and to look for compliance. It will be necessary to ensure
that all of the processes and policies in relation to the business continuity management framework
are audited regularly to ensure that they are all meeting their intended functions.
This will allow for the business continuity management framework to be able to be refined and
altered after each audit in another act of continual improvement that will aid the organisation in
striving for success and risk minimisation.
Version 1.5
Learner Resource
SUMMARY
Now that you have completed this unit, you should have the ability to establish and review the
business continuity management framework and strategies.
If you have any questions about this resource, please ask your trainer. They will be only too
happy to assist you when required.
Version 1.5
Learner Resource
REFERENCES
Continuous improvement
Retrieved: 14 Aug 2015
http://asq.org/learn-about-quality/continuous-improvement/overview/overview.html
Hoshin kanri
https://en.wikipedia.org/wiki/Hoshin_Kanri
Corporate governance
http://www.businessdictionary.com/definition/corporate-governance.html
Risk management
http://www.business.gov.au/business-topics/tax-finance-insurance/insurance/Pages/risk-
management.aspx
Business continuity management

http://searchcio.techtarget.com/definition/business-continuity-management-BCM
Business continuity management

http://www.anao.gov.au/uploads/documents/Business_Continuity_Management.pdf
Version 1.5

BSBCON801 Learner Resource V1.5

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

BSBCON801 Learner Resource V1.5

Uploaded by

Copyright:

Available Formats

BSBCON801 Establish and

review the business

REVIEW AND ANALYSE REPORTS ON BUSINESS CONTINUITY MANAGEMENT

No licencing, legislative or certification requirements apply to this unit at the time of

Industry Capability – Continuity

ELEMENTS AND PERFORMANCE CRITERIA

1.3 In consultation with others, establish governance structures for

1.4 Determine and seek approval for resources required to implement

1.5 Support relevant personnel to implement business continuity

1.6 Establish a management system for organisation’s business

1.7 Seek management approval of organisation’s business continuity

framework and strategies business continuity management framework

2.2 Provide relevant personnel with information relating to cyclical

2.4 Consult with relevant personnel about the implementation of

2.5 Monitor business continuity management framework learning,

3.3 Review and update the overall business continuity management

3.4 Analyse and integrate organisation’s business impact assessment/s

3.5 Implement and conduct business continuity management program

THIS SECTION DESCRIBES LANGUAGE, LITERACY, NUMERACY AND EMPLOYMENT SKILLS

Writing 1.7, 2.2, 2.3  Develops detailed workplace documentation

techniques to identify different perspectives and

Numeracy 1.4  Analyses numerical information to determine

TOPIC 1 – ESTABLISH BUSINESS

Relevant personnel may include:

 Chief executive officer

DEMONSTRATE CLEAR SPONSORSHIP, RESPONSIBILITY AND

Sponsorship: In the internal business environment sponsorship of an idea or strategy is to fully

 Mission statement: The organisations mission statement is the

order to ensure that the commitment to these factors can be clearly

IN CONSULTATION WITH OTHERS, ESTABLISH GOVERNANCE

Governance structures may include:

 Using all of the organisations human resources in decision making

DETERMINE AND SEEK APPROVAL FOR RESOURCES REQUIRED

Resources required in order to effectively implement the business continuity management

 Information: Information is an extremely valuable resource that will need to

 Human: Human resources of all personnel that will be involved in the

Resource proposals will need to contain the following information:

SUPPORT RELEVANT PERSONNEL TO IMPLEMENT BUSINESS

Information required may include:

Required training may include:

Specialist advice may be in relation to:

Opportunities for collaboration may include:

When supporting relevant personnel to successfully complete business continuity management

ESTABLISH A MANAGEMENT SYSTEM FOR ORGANISATION’S

 Specific: plans have a much greater chance of successful completion than

 Efficiency measures: These measures are cost and productivity measured as

SEEK MANAGEMENT APPROVAL OF ORGANISATION’S BUSINESS

Management may include:

 Chief executive officer

Organisational needs may include:

 Organisational goals and objectives

 Complete and accurate information is provided

 All documentation and information provided is done so in the requested

TOPIC 2 - MONITOR BUSINESS

Continuous/Continual improvement process: Continuous improvement which is sometimes called

 Check: Assess the change to determine its success.

PROVIDE RELEVANT PERSONNEL WITH INFORMATION

 Size of the organisation

It will be necessary to conduct a range of information sharing activities including:

 Purpose of the business continuity management framework

 Learning and development opportunities

 Purpose of the governance structure

Training may include:

DEVELOP AND SEEK APPROVAL OF TOOLS TO VERIFY AND