REPUBLIC OF THE PHILIPPINES

MINDANAO STATE UNIVERSITY- SULU

Capitol Site, Jolo, Sulu
7400
Office of the Campus Secretary
January 5, 2023

BRIEF FOR : CHANCELLOR NAGDER J. ABDURAHMAN, Ed.D

This University

Subject : Business Continuity and ICT Continuity Plan

x-x-x x-x-x x-x-x

Dear Chancellor Abdurahman,

Assalamu alaykum!

This is to respectfully brief your office regarding the BCP and ICT Integration seminar last
October 2022. Although this brief is not really urgent, the undersigned believes that it is
generally important for it contributes to having a positive impact for the institution today and in
the near future; to wit:

I – Rationale, Terms and Purpose of BCP and ICT Continuity Plan

 Business continuity plan entails, document that outlines how an organization will
continue to function during and after an emergency.

 Documented procedures that guide an organization to respond, recover, resume and

restore itself to a pre-defined level of operation following a disruption

 It Involves planning how your key services can continue despite the disruptions
foreseeable or not. It could be a “black swan” like the COVBID-19 pandemic or a “grey
rhino” which is a very visible ‘risk’ that is about to happen, but simply ignored.

 Whereas the Pandemic exposed inadequacies and inequities:

a. Lack of access to the broadband and digital devices;
b. Absence of supportive environments needed to focus on learning; and
c. Misalignment between resources and needs.
  Pandemic underscored the need to address ‘education continuity’ - a proactive way to
ensure mission-critical operations proceed during a disruption.

BUSINESS CONTINUITY FOR HIGHER EDUCATION

 The capability of an organization to continue the delivery of products and services at

predefined levels following a disruptive incident.
 The capability to resume business operations should a crisis occur.
 A state of continued, uninterrupted operation of a business.

PURPOSE OF THE BCP

 To ensure that essential business activities can continue following a disaster or major
disruption.
 To act as a guide for key individuals to effectively link in with the University
organizational structure in a crisis and recover key services within own area.
 To document how the division or department will perform essential operations during
and emergency or long-term disruption.

Resilient Higher Education

 Responds quickly to emergencies

 Manages risks of illness, injury, damage, data loss, missed classes, suspended
examinations, delayed graduations, chaotic registration
 Minimizes impacts of hazards (typhoons, earthquakes, floods, viruses)
 Flexible administrative staff, teaching and research faculty, and student body that
can adapt quickly when learning and working conditions are not ideal

BCP Process
 Guidelines
╸ A senior university official should take ownership of the business continuity plan.
╸ The responsibility of managing the business continuity plan must be clearly
established.
╸ The BC Planning Core Team should be small, and suitably authorized to review
operations and capable of identifying key processes that should
be protected and prioritized in the plan.
╸ Establish the scope of the work for the planning team.

Business Impact Analysis

Operational Financial Market/Strategic

• Loss of/inaccessible facilities • Fines, penalties • Decreased enrollment
• Unavailability of employees • Fees • Loss of key staff/faculty
• Utility failures • Increased insurance premiums • Jeopardized accreditation
• Vital records destroyed/not • Loss of grants or subsidies • Lower university standing
accessible • Loss of alumni contributions

Technological Legal Reputation

 Telephone services unavailable • Noncompliance with • Loss of trust

• Critical software unavailable
• Data unavailable destroyed
• Data corruption or theft
• Computer hardware failure
regulations
• Contract violations
• Personal liability issues
• Negative media publicity
• Degradation of service
• Insufficient continuity
planning or disaster recovery
planning leading to slow
response time
Sample Tool: Business Continuity Plan
 Lastly, ICT continuity plan is also closely complementary to abiding with the Data Privacy
Act of 2012. Hence, lawsuit arising from the breach of data and privacy of stakeholders and
university constituents is not a distant possibility.

Respectfully yours,

ABDEL AJIM M. SALASAIN

Acting Campus Secretary