|
|
Continuity Planning
MSA has a strong reputation
as industry experts who are highly capable in implementing
business continuity planning for a wide spectrum of organizations.
We apply time-tested processes to develop adaptive, customized
programs for our client’s specific needs. Some
of the methods we employ are risk assessments, business
impact analyses, establishment of continuity processes,
business continuity plan development, and test, training
and exercises programs. Below is a description about
how MSA implements these methods:
Execution of Risk Assessments
MSA has conducted extensive
risk assessments that include assessment of both physical
and operational risks. This step is vital in establishing
a successful business continuity program to understand the
vulnerabilities and hazards from which an organization may
be affected. For example, a risk assessment may identify
vulnerabilities in a building’s design that makes
it susceptible to flooding, hazardous material release,
and criminal or terrorist activity.
Execution of Business Impact Analyses
Business impact analyses
are a foundational step in establishing a successful continuity
program. MSA has successfully conducted these analyses
to identify the essential functions of a wide variety of
agencies. A business impact analysis is a serious
undertaking that requires inputs from business process owners
over the entire breadth of an organization. Through
this process our analysts weigh vast volumes of data, organizational
policy, and mission requirements to synthesize the functions
that must be completed throughout an emergency. The
results of the business impact analysis provide the vast
majority of the source data necessary to evaluate continuity
options and develop the Business Continuity Plan.
Establishment of Continuity Processes
In response to the risks
identified in the risk assessment process and the functions
identified in the business impact analysis, MSA establishes
customized continuity processes. These processes must
mitigate risk and ensure the continuity of essential functions
within the timeframes and conditions required by the organization.
MSA has a large cache of continuity strategies that it can
employ and modify, as necessary, to ensure the client’s
needs are fully addressed. Some of these processes
include the use of an alternate operating facility, devolution
of essential functions to alternate offices, telework, and
process automation.
Development of Business Continuity Plans
Business Continuity
Plan (BCP) development is the formal documentation of how
an organization will continue the essential functions identified
in the business impact analysis. MSA has developed
numerous business continuity plans that guide our clients
in how to continue their essential functions. These
plans are customized to meet varying levels of detail for
different audiences. Generally, a process-oriented
BCP provides the requisite information for senior executives
to execute the decision-making process and know when and
how to implement the BCP. The process-oriented BCP
is accompanied with supporting standard operating procedures
that provide direction to key personnel on the tactical
execution of essential functions.
Execution of Test, Training & Exercises
Without a robust Test,
Training & Exercise (TT&E) program, the business
continuity plan is profoundly ineffective. MSA has
a large cache of testing, training, and exercising materials
that we customize for our clients to ensure that all personnel
know their precise role during an emergency. Our training
events are tailored by audience to address their specific
knowledge requirements. For example, we developed,
coordinated, and executed a Preparedness Fair for a workforce
of 5,000 people to present personal preparedness, occupant
emergency plan, and continuity of operations information.
Testing and exercising events are tailored to meet specific,
measurable objectives in the business continuity plan.
By testing specific elements of the BCP such as: communications,
decision-making processes, and alternate operating facility
set-up procedures; the organization has the opportunity
to avoid potential vulnerabilities during an actual emergency.
|
