0% found this document useful (0 votes)
138 views26 pages

Business Continuety Plan 2022

Project Planner Responsibilities: - Develop a project work plan and timeline for drafting the BCP - Coordinate the Business Impact Analysis process - Draft the initial BCP document - Coordinate review and approval of the BCP - Coordinate testing and maintenance of the BCP BCP Response Team This team is responsible for activating and executing the BCP in the event of an emergency or disruption. They will assess the situation, determine the appropriate response, and coordinate recovery activities. Manager: Facilities Manager Responsibilities: - Assess the nature and severity of the emergency or disruption - Activate the appropriate components of the BCP - Coordinate notifications to staff and external stakeholders

Uploaded by

Ernesto Pena
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
138 views26 pages

Business Continuety Plan 2022

Project Planner Responsibilities: - Develop a project work plan and timeline for drafting the BCP - Coordinate the Business Impact Analysis process - Draft the initial BCP document - Coordinate review and approval of the BCP - Coordinate testing and maintenance of the BCP BCP Response Team This team is responsible for activating and executing the BCP in the event of an emergency or disruption. They will assess the situation, determine the appropriate response, and coordinate recovery activities. Manager: Facilities Manager Responsibilities: - Assess the nature and severity of the emergency or disruption - Activate the appropriate components of the BCP - Coordinate notifications to staff and external stakeholders

Uploaded by

Ernesto Pena
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
You are on page 1/ 26

BLANCO INTERNACIONAL SA

Business Continuity Plan

Guidance for local Operations

Document prepared and applied to BISA, taking from


Enterprise BCP Program, DAS as bibliography example.
BISA Plan

Table of Contents

I. INTRODUCTION 1

A. Purpose of this Business Continuity Plan 1


B. Objectives of this Plan 1
C. Authority for this Plan 2
D. Distribution List 2
E. References and Related Documents 3

II. AGENCY OPERATIONS 4

A. Team Roles and Responsibilities 4


B. Plan Activation Procedures 6
C. Alternate Site Plans 8
D. Communications Plan 9

III. CRITICAL BUSINESS FUNCTIONS 14

A. Conduct Audits 14
B. Issue and Verify Licenses 18

IV. RECOVERY PLAN 22

V. APPENDICES 28

A. Agency Organizational Chart and Delegations of Authority 28


B. Disaster Impact Assessment Form 29
C. DAS Emergency Lease Form 30

Essential Staff Contact Information 37


I. INTRODUCTION

A. Purpose of this Business Continuity Plan

Business continuity plans are designed to help organizations recover from a disruption in service.
Specifically, this plan provides policy and guidance to ensure that the [Company Name] can
respond effectively to a disruption and restore essential services to the Customers as quickly as
possible.

B. Objectives of this Plan

The objectives of this business continuity plan are to:

 Identify advanced arrangements and procedures that will enable the Company to respond
quickly to an emergency event and ensure continuous performance of critical business
functions.

 Reduce employee injury or loss of life and minimize damage and losses.

 Protect essential facilities, equipment, vital records, and other assets.

 Reduce and mitigate disruptions to business operations.

 Identify managers and other staff who might need to be relocated depending upon the
emergency.

 Identify teams which would need to respond to a crisis and describe specific responsibilities.

 Facilitate effective decision-making to ensure that agency operations are restored in a timely
manner.

 Provide support to employees and employee families during an event so that employees know
that the safety of their families has been addressed, and that employees will therefore be
available to work and help restore agency function.

 Identify alternative courses of action to minimize and/or mitigate the effects of the crisis and
shorten the agency response time.

 Quantify the impact of any kind of emergency in terms of dollars, time, services, and work
force.

 Recover quickly from an emergency and resume full service to the public in a timely manner.

C. Authority for this Plan

BISA BCP Coordinator, Management Team, requires each executive from the Company, to
develop and implement a Business Continuity Plan to “ensure that critical state services will
continue despite their interruption by an emergency, disaster, or other unplanned event, whether

BISA 1 of 26
Nov:2022
natural or manmade.” This policy was signed by the Company Manager in Jul, 2022 and requires
agencies to have developed and tested business continuity plans by Aug 30, 2022.

D. Distribution List

This plan supersedes the plan dated, ___/___/____which shall be considered


obsolete.

[Explanation: This section should include a list of the current copies of the the position title of the responsible
person of BCP coordinator, and the location at which the copy is stored. It is recommended that individual
names not be included in the document itself, but kept in a separate location.]

Copy Number Title Location


1 BCP Coordinator Headquarters Office
Director’s Office ( ?)
2 BCP Coordinator Home
(See separate contact list for address)
3 Company Director Headquarters Office
Director’s Office (?)
4 Company Director Home
(See separate contact list for address)

5 Communications Headquarters Office


Director

7 IT Director Headquarters Office

8 Factory Manager Local Company Office


La Vega Free Zone

E. References and Related Documents

[Explanation: This section should include references to any documents, or plans that might assist both in
writing your BCP and also recovering from an event.]

Document Title Owner and contact Location


details
Company Emergency BCP Coordinator Headquarters Office
Response Plan Director’s Office ( ?) to Local DR office
Emergency Management BCP Coordinator Headquarters Office to Local Office
Plan 1st floor
Director’s Office DR local office.
Cubicle 56
Building Evacuation Plan HR Executive Headquarters Office
for Headquarters Assistant / Local Human Resource Section
Heat office or local
Building Evacuation Plan Executive Assistant / Bend Field Office
for Bend Field Office Local Plan Manager
Communicable Disease Human Resources Headquarters Office
Policy Manager/ local Human Resource / DR Local office

BISA 2 of 26
Nov:2022
Disaster Recovery Plan IT Director Headquarters Office

Disaster Recovery Plan IT Director Home

Company Technology Plan IT Director Headquarters Office

II. COMPANY OPERATIONS

A. Agency Mission and Key Activities

Agency Mission:

To serve the people of LA VEGA by protecting, managing, and promoting


stewardship of La Vega to enhance safe environmental, economic, and
community sustainability.

Key agency activities include:

 Fire protection for full Company Buildings.


 Regulation of Budling maintenance, inside and outside.
 implementation of the La Vega BISA facilities Plan for any possible natural disaster or fire.;
 Detection and control of harmful forest insect pests and forest tree diseases all around the
facilities.
 Management of 5000 square mts.
 Operation of a 3 building under 1 maintenance manager and 2 assistants.
 Frequently assessment about the Facilities physical structures.
 Frequently assessment around the facilities for any possible risk not health forest.
 Frequently assessment around and inside the facility because of any potential electric risk.

B. Team Roles & Responsibilities

BCP Sponsor: Company Deputy Manager


BCP Coordinator: Project Planner

The Company has created two business continuity teams:


 BCP Coordination Team
 BCP Response Team

For emergency contact information for members of all teams, see separate calling tree lists.
These separate lists include cell phone numbers, home phone numbers, home email, and pager
numbers, as applicable.

BCP Coordination Team

This team is responsible for drafting and finalizing the Company business continuity plan. This
includes developing a project work plan outlining the steps necessary to draft the plan and

BISA 3 of 26
Nov:2022
ensuring that each step is completed. This team will finalize the questions to be asked as part of
the Business Impact Analysis (BIA) process. Each team member will fill out a (BIA)
questionnaire and will also assign staff within his/her own division to answer (BIA) questions,
as necessary. This team will meet periodically to review project progress, will revise work
plan as necessary, and will edit and approve the final plan.

Team Members Role / Responsibilities Contact Information


1. BCP Coordinator Draft work plan necessary to develop the work phone number
BCP. Draft BIA questions for staff to
answer. Conduct interviews will all staff
members. Compile information and draft
BCP.
2. BCP Sponsor Assist Coordinator to draft project work work phone number
Deputy Manager plan and draft BIA questionnaire. Complete
BIA questionnaire. Assign other staff as
necessary to complete project. Send out
periodic emails to all staff providing project
updates.
3. Agency Director Review and approve initial BIA work phone number
questionnaire. Review work product
throughout project. Send out occasional
emails to all agency staff underscoring
importance of project thanking staff for
their work on developing BCP.
4. Communications Review on-going work as member of this work phone number
Manager team. Complete BIA questionnaire and
identify staff needed to complete specific
tasks. Has primary responsibility for
completing communications section of plan.
5. IT Manager Review on-going work as member of this work phone number
team. Complete BIA questionnaire and
identify staff needed to complete specific
tasks. Has primary responsibility for
drafting Disaster Recovery Plan.
6. Field Manager Review on-going work as member of this work phone number
team. Complete BIA questionnaire and
identify staff needed to complete specific
tasks. Has primary responsibility for
drafting recovery steps for field office
section of the plan.

BCP Response Team

This team is responsible for responding in the event of a disaster. This includes assessing potential
damage to the Company facilities and enacting the Company, Company Coordinator Center. This also
includes taking lead responsibility for ensuring that the agency can function effectively during a crisis
and can resume business operations as quickly as possible.

BISA 4 of 26
Nov:2022
Team Members Role / Responsibilities Contact Information
1 Agency Director Determine if event is severe enough that work phone number
BCP should be enacted. Operates from the
Agency Coordination Center. Initiates call
tree process of contacting all agency staff.
2 Facilities Manager Conduct initial assessment of Company work phone number
facility(ies) following an event. Has lead
responsibility for setting up alternate
facility, if necessary. Has lead
responsibility for implementing sections of
plan dealing with facilities and power
elements.
3 BCP Sponsor Acts as back-up to agency director if work phone number
Deputy Director director is unavailable.
4 Communications Has lead responsibility for implementing work phone number
Manager communications strategy contained in this
plan.
5 BCP Coordinator Has lead responsibility for ensuring that work phone number
BCP is properly enacted and steps are
followed as appropriate.
6 IT Manager Conducts initial assessment of information work phone number
technology for agency following event. Has
lead responsibility for implementing
sections of plan dealing with of IT and
network elements.
7 Human Resources Has lead responsibility for implementing work phone number
Manager sections of plan dealing with staffing
elements.
8 Contracts and Has lead responsibility for dealing directly work phone number
Procurement with vendors and suppliers.
Manager
9 Field Manager Has lead responsibility for implementing work phone number
plan as it relates to Bend field office.

C. Plan Activation Procedures

Warning Conditions

With warning:
It is expected that in some cases, the Company will receive a warning at least a few hours prior to
an event when possible. This will normally enable the plan to be enacted with an orderly
notification and evacuation of staff.

BISA 5 of 26
Nov:2022
Without warning:
The ability to execute this plan following an event with little or no warning will depend
on the severity of the emergency and the number of Company personnel who have been
affected by the event.
 Non-Duty Hours: Although the Company office buildings may be rendered
inoperable, it is likely that the majority of Company staff could be alerted and
deployed to the alternate site.
 Duty Hours: If possible, this plan will be activated and the pre-designated
available staff will be deployed.

Identification of Potential Disaster Status

Criteria for determining whether a particular emergency situation requires that emergency
actions be taken or the BCP be enacted include:
 Is there an actual or potential threat to human safety?
 Is there likely to be a need to involve emergency services?
 Is there an actual or potential serious threat to buildings or equipment?
 Is there an actual or potential loss of IT/network?
 Is there an actual or potential loss of workforce?

Direction and Control

[Explanation: During a disaster/disruption, it is imperative to have a clear chain of command and delegation of authority.
Describe the chain of command and authority that will exist during an event. NOTE: It is often helpful to insert organizational
charts to explain the chain of command.]

 Lines of succession will be maintained by all managers reporting to the Company director to
ensure continuity of essential functions. If possible, successions should be provided to a
depth of at least three staff where policy and directional functions are involved.
 The agency director or designated back-up (successor) may order activation of the Company
business continuity plan.
 See Appendix A for Delegations of Authority and the agency organizational chart.

D. Agency Operations Center

BCP Operations Center – Primary Site

[Explanation: Describe where the BCP Response Team will initially meet to review and plan their activities. Give the address
and telephone number(s) of the location and detailed instructions on how to get there. If possible, cut and paste a map of the
area into this document.]

Address:
La Vega Free Zone, BISA Buildings, Main street.

Contact: ANGEOLINO MORONTA


809-601-0939

BISA 6 of 26
Nov:2022
Directions:
From the Revenue Building: Go La Vega Free Zone , Main Street, Bisa
Buildings.

[Recommend inserting map showing directions to site, as well.]

BCP Operations Center – Alternate Site

[Explanation: In the event that the primary site for the BCP Response Team is unavailable,
describe where the team will meet to review and plan their activities. Give the address and
telephone number(s) of the location and detailed instructions on how to get there – if possible,
cut and paste a map of the area into this document. If no alternate site has been previously
established, indicate that the BCP Coordinator will communicate this information at the time of
a declared emergency.]

E. Alternate Site Plans

Explanation: Provide a description of which alternate site you will use as you
begin the process of recovering your critical business functions. Also, if your
plans include using DAS to find alternative space, please note such and fill out
the DAS Form 125601, “DAS Office Space Request Form” or complete the
“DAS Emergency Lease Form” (See Appendix C.)

The building 1/2/3/4/5 has been designated as the alternate worksite of each other in case of
emergency. We have put internally between our neighbors to allow up to 10 Company
personnel work space for up to 30 days. At that point, if our building is still unavailable, we
will organize and use the one of the available buildings during the Emergency.

BISA 7 of 26
Nov:2022
[Recommend inserting map showing directions to site, as well.]

F. Communications Plan

During a crisis situation, communication with all affected areas and parties – from staff to
customers to media – is vital. The information provided to all Customers must be accurate and
timely. As outlined in the state’s Emergency Management Plan, state Company are responsible
for issuing information to:
 Help prevent loss of life and injury or any possible of risk of missing wip or finished
product.
 Warn and inform people and product in danger, and tell them what they can do to
reduce their risk
 Improve appropriate public response to future emergencies and disasters through
education.

In particular, any estimate of the timing to return to normal working operations should be
announced with care. It is also very important that only authorized personnel deal with media
inquiries.

Staff Communications

If a staff member learns of a potential crisis situation, the staff person should immediately
contact the Company director or communications director/Manager.

If the building structure is in question, staff should not enter the building., also make sure the
product involved will be replaced under a good preventive plan.

Once a crisis has occurred, the following chart and plan section will be used to communicate with all
parties:

Groups of persons or Persons authorized to coordinate communication to


organizations affected by affected persons and organizations
disruption Position Contact Details
Customers Communications Director work phone number/email
Management and Staff Agency Director work phone number/email

BISA 8 of 26
Nov:2022
Procurement and Contracts
Suppliers work phone number
Manager
Media Communications Director work phone number/email
Other Third Parties Communications Director work phone number/email

Customer contact:

The communication director or designee will develop an official statement for customers.
Depending upon the type and severity of the event, the statement may be issued in the following
ways:
 Through local media
 Scheduled customers may be called or e-mailed
 Notice may be posted at the affected facility(ies)

The agency director will record a message on the agency’s main phone line briefly explaining
the crisis and directing callers to the agency web site (if available) for additional information
and updates.

Management and Staff Contact:

The agency director or designee will develop an official statement for managers and staff.

If the event happens during work hours, and depending upon the severity of the event:
 Staff may be sent home
 Staff may be asked to assist in implementing work-around procedures

If the event happens after work hours, or becomes a multi-day event, staff will be contacted
through:
 Employee call /emails
 A call-in number for information about which types of employee positions are to
report to work
 Information posted to Company web site
 Bulletin through local radio station FM/AM

In general, the employee call involves the following:


 Company director calls:
o All division directors
o Communications director/Manager
o Human resources manager/ Local
o Executive assistant / Local
o Internal Auditor / Internal local.
o Production Manager.
o Warehouse Manager.

 Division administrators call their section managers. If a division administrator is


unavailable, the Company director calls the section managers.

BISA 9 of 26
Nov:2022
 Section managers call their staff. If a section manager is unavailable, the division
director calls the staff.

See separate list for call, providing staff list and contact information. Each manager has a copy
of this call and maintains that list in a secure location separate from copies of the business
continuity plan. (BCP)

In addition, the Company director shall leave a voice mail message at [phone number]
instructing employees on the status of the agency’s offices and where to report. Staff should be
instructed to refer all media inquiries to the designated person (e.g., communications director).
[Ideally, agency will have a contract with phone provider (e.g., Qwest) to have an external
phone number available for staff to call. This will require a contract and monthly fee paid to
the provider. The benefits are that this number can be available even if the agency’s phones are
down and multiple people can call into these lines at the same time. If this is not practicable,
then designate an internal office number (e.g., Director’s number) for staff to call.]

Suppliers Contact:

The contracts and procurement manager will be the sole contact with suppliers during the
business recovery phase. The facilities manager will use emergency procurement procedures
and receive authorization for emergency purchases from the Company director or designee.

Media Contact:

[It is recommended that the person who will serve as the primary contact with media prepare
general public statements in advance to respond to questions frequently asked by the media and
the public. These statements can be attached as an appendix to this document, and modified as
needed at the time an event occurs.]

Once an event occurs, the communications director will develop official “public statements” to
respond to questions frequently asked by the media and the public. The communications
director will provide these statements to the agency director or designee for review and approval
before providing the statements to any external parties. The communications director will also
contact the governor’s press office to coordinate contact with the media, if appropriate.

Note: after to be sure the even occurred, investigate the ratio of damage to the WIP them to
prepare the replacement plan and possible new date or original if possible.

The communications director will develop statements to respond to the following questions:
 What happened?
 When did it happen?
 How is state of affected by this incident?
 How much damage was done to the building? and to the WIP and materials?
 How many people work in the building (including other Company or buildings, if
applicable)?
 Did you have to evacuate the building? What time? Was it a total or partial
evacuation?

BISA 10 of 26
Nov:2022
 What corrective measures are being taken to ensure that this doesn’t happen again?
 Has the General Director been notified? What was his/her response?
 When can employees come back to work?
 How will this event affect the agency’s service to the public?
 Where will be located the affected area meanwhile the affected is repaired.

Depending on the nature of the crisis, determine if a technical expert or a public official with
specific jurisdiction is required to provide clarity to the situation and/or disseminate information
to the media.

If anyone other than the communications director will communicate with the media (e.g.,
technical expert, field office manager), the communications director will provide those people
with the following:
 Spokesperson guidelines
 List of potential questions
 Appropriate statements and responses
 Communications director’s cell phone and home phone numbers

If necessary, the communications director shall also:


 Select and acquire a “media briefing center.” Ensure that the briefing center is large
enough for one-on-one interviews.
 Acquire updates regarding the event occurrence and status of injured employees.
 Arrange interviews and press conferences, as required.
 Coordinate with other agencies to disseminate information to external parties, if
appropriate.

The communications director/Manager shall also develop “media kits”/press releases containing
the following information for distribution to local newspapers, television stations, and radio
stations:
 Location of event
 General description of event (stated as positively as possible)
 Corrective measures being taken
 Description of impacts (non-monetary and stated positively)
 Media contact made

Finally, the communications director shall ensure that media and internal response information
is recorded/documented for the duration of the recovery effort.

Other Third Parties

The communications director shall be primarily responsible for all contact with other third
parties. If appropriate, after consulting with the agency director, the communications director
will provide information to other staff to assist in responding to these requests for information.

Agency’s Emergency Management Obligations

BISA 11 of 26
Nov:2022
Emergency Management: In the zone, Emergency Management Plan, the Department of State
Buildings is categorized as a Support Company during a large-scale, statewide emergency.
Support Companies are “responsible to provide expertise, experience, and assets to the Support
Functions as needed or requested by the Primary Company.”

Crisis Communication Plan: DSL is part of the Company communications plan which
provides for timely, accurate and coordinated public information during a multi-Company crisis
if apply. The plan’s leadership team, composed of staff from DAS, the General Director Office,
Local Fire Department Office, ODOT, Emergency Management and others, has developed a
communications chain of command and call tree which will be activated in the event of a major
disaster or multi-Company crisis. DSL is included in the natural-resource company category.

Public Affairs Manager


Heat office Emergency Management

III. CRITICAL BUSINESS FUNCTIONS

[Explanation: Provide the following information for each of the agency’s identified
Critical Business Functions (CBFs).]

A. CBF #1 – Conduct Audits


(Example provided by Secretary of State)

1. Description of Business Function

Ensure that the Company funds are properly accounted for, spent in accordance with legal
requirements, and used to the best advantage. The Audits Division conducts audits by
completing the following processes:
 Management of databases info/network security
 Business office functions
 Computer support/helpdesk
 Financial audits
 Management of library and reference materials
 Auditor training and CPE management

2. Recovery Time Objective (RTO)

72 hours – this plan is based on the assumption that any potential disruption occurs in the
middle of Audits Division critical timeframes during peak volume (Aug to Dec of each year).
Working with this assumption, 40% of business processes must be recovered within 72 hours,
65% within 1 week, and 85% of business processes must be recovered within 1 month.

The timing of this disruption, more than anything else, will determine the RTO
for specific processes. A disruption during non-peak timeframes will allow
RTOs to be more lenient.

3. Priority Level (relative to other business functions) – 1

BISA 12 of 26
Nov:2022
4. Key Staff

Head of Audits Division –


 Role/responsibilities: oversight of functions of Audits Division
 Work phone number
 Emergency/evening contact information: see Call list

Deputy of Audits Division (back-up) –


 Role/responsibilities: assistant director of Audits Division
 Work phone number
 Emergency/evening contact information: see Call list

5. Key processes

# Business Processes Point of contact and contact Recovery priority and rationale
information
[List business Only work contact information is
processes that support provided below. Emergency/
Critical Business home information is contained
Function] on separate Call Tree list.
1 Database Business Operations Manager Within 24 hours – the ability to secure the
management and [work phone number] databases and network is critical, as is the
info/security ability to grant and/or revoke access to these
network systems in a timely fashion
2 Business office Business Operations Manager Within 48 hours – Business Office functions
functions [work phone number] support all auditing functions through
purchasing, invoicing, web site
administration, word processing, and
personnel management, etc. This process
must be functioning to support the remaining
processes of this business function.
3 Computer support/ IT Manager Within 72 hours – Because many auditors
helpdesk [work phone number] work remotely, it is essential that they have
access to computer support and helpdesk
processes. This process may become even
more important in situations where the
Audits Division Office is disabled.
4 Financial Audits Audits Division Manager Within 1 week – As one of the primary
only about the [phone number] functions of the Audits, it is important to
process involved. restore this process as soon as possible so
that public interest may be protected.
5 Performance Audits Audits Division Manager Within 1 week – As one of the primary
[phone number] functions of the Audits Division, it is
important to restore this process as soon as
possible so that public interest may be
protected.
6 Library/reference IT Specialist Within 2 weeks – This process supports the
management [phone number] division’s ability to conduct audits.
7 Auditor training and Human Resources Manager Within 1 month – This process ensures there

BISA 13 of 26
Nov:2022
# Business Processes Point of contact and contact Recovery priority and rationale
information
CPE management [phone number] are trained and certified auditors available to
carry out the mission of the division.
8 Recruiting Human Resources Manager Within 90 days – This process ensures the
[phone number] division maintains a skilled workforce of
auditors to carry out the division’s mission to
protect the public interest.

6. Key Dependencies

# Upon which activities is Point of contact and contact Recovery Time Objective for the
this business process information dependency
dependent?
1 Audits Division network IT Manager Within 24 hours – The networks and
drives and systems [phone number] databases must be secured within this
timeframe.
2 Computer systems IT Manager Within 72 hours – The IT systems must
[phone number] be functional within this timeframe to
allow the Audits Division processes to
be recovered within 1 week.
3 Remote access ABC Computing Inc. (vendor) Within 72 hours – Remote access must
functionality and [phone number] be restored within this timeframe to
coordination allow auditors to conduct their work at
remote locations.
4 Purchasing and Purchasing Manager Within hours – Depending on the scale
procurement capability [phone number] of the disruption, we must be able to
purchase audits systems and equipment
to restore function within hours or days
of a disruption.

7. Vital Records

Description Where Contact


Audits documentation Network servers, Audits Executive Assistant
audit sites; laptops next to main office work phone number
Audits documentation Paper files / next to main office Audits Executive Assistant
work phone number
Correspondence Network servers / next to main office IT Manager
work phone number
Audits forms Intranet; network / next to main office Company Web Master
work phone number
Master audit reports Internet; next to main office Audits Executive Assistant
work phone number
Time and billing records Vendor; network servers, next to main Vendor contact information
office Payroll Lead Staff
work phone number
Training records Network server (database), / next to Human Resources Manager
main office work phone number

BISA 14 of 26
Nov:2022
Description Where Contact
Downloaded agency audit Network server (next to main office) IT Manager
data work phone number
Personnel records Network server, next to main office Human Resources Manager
work phone number
Reference materials Network server (Q: drive), main office; IT Manager
auditor cubicles work phone number
Purchase card and motor Main office Procurement and Contracts
pool cards Manager
work phone number

8. Equipment and Office Supplies

Not available in the company structure

9. Facilities

In order to execute this business function, the following minimum facilities are required.

Description Where Contact


Meeting space to Main street The building not affected ( any) Facilities Manager
accommodate members of work phone number
the BCP Committee
Mailroom facilities for Main street The building not affected ( any) Facilities Manager
three employees work phone number
Warehouse space for Main street The building not affected ( any) Facilities Manager
supplies – must be at least work phone number
400 sq. feet
Office space for seven Main street The building not affected ( any) Facilities Manager
employees work phone number

10. Regular Suppliers and Vendors

(See separate vendor contact list for additional contact information, including emergency contact
information.)

Name of Supplier/ Vendor Key Goods or Services Provided Normal Contact Details
Every Denison Thread for sewing work phone number
A&E Thread for sewing work phone number
SMT Care labels / price tickets work phone number
J&J Packing cartons / trims work phone number

BISA 15 of 26
Nov:2022
11. Alternate Suppliers and Vendors

Name of Supplier/ Vendor Key Goods or Services Provided Normal Contact Details
The Willbes Dominicana Fabric / Production Bani, sourcing office
Nexgen Labels and tickets China / Vietnam/Indonesia

1. Description of Business Function

Issue and verify licenses for each of the health professions that are part of this plan. The agency
was created for the purpose of issuing licenses and verifying that licenses are in good standing.
In order to issue a license, the following needs to occur:
 The application form must be completed and all required documents received and checked
for accuracy and authenticity. Education, required test results, and past work must all be
verified and determined to be in good standing. Criminal background must also be checked.
 The director approves issuance of a license, the fee amount is entered into accounting, and
the license is printed and mailed to the applicant.
 For license verifications, when a written document is needed, it is printed off the database
on Company stationery, a seal is affixed, and the verification is signed and sent to the state
or other entity requiring the verification.
 The database is kept current with license verifications made available on the web site and
updated on a daily basis.

2. Recovery Time Objective (RTO)

This critical business function does not need to be resumed within three days of an incident.
However, the business impact of not licensing and verifying licenses means that these health
professionals cannot work in La Vega or in other place where they need Company verification.

This plan is based on the assumption that licensees and those hiring them should receive their
license or be able to verify a license within two weeks. During an incident, the RTO for all
processes within this business function is one to two weeks depending on the nature of the
incident. The plan is designed to have at least 50% of operations up within one week of an
incident and at least 80% up within two weeks. This is the maximum acceptable length of time
that can elapse before the lack of this business function severely affects the public.

3. Priority Level (relative to other business functions) - 2

4. Key Staff

The director of each individual board is responsible for the functions of that
board being restored. Where possible, back-up staff for these directors have

BISA 16 of 26
Nov:2022
been designated. The contact information for these individuals is maintained in a
list kept separate from this plan.

Functions to be performed include receiving applications and issuing licenses.


Director of the Company is responsible for license issuance. In some instances,
as provided in “Appendix A – Designee List,” additional staff can perform this
work in addition to or in place of the directors or Manager.

5. Key processes

# Business Processes Point of contact and contact Recovery priority and rationale
information
[List business processes Only work contact information is
that support Critical provided below. Emergency/ home
Business Function] information is contained on separate
Call Tree list.
1 Have applications Each board director Within one week – applications
available [work phone number] available on web site
2 Receive application Each board director Within one week – obtain application
materials [work phone number] and information concerning schooling,
verifications, test results, CE, etc.
Back-up staff position
[work phone number]
3 Check whether Each board director Within two weeks – review all materials
application is [work phone number] to determine all necessary information
complete and ready is included; computer system is up or, if
to issue license Back-up staff position necessary, license is hand written by the
[work phone number] director
4 Have verifications on Each board director Within one week
web site [work phone number]

Back-up staff position


[work phone number]
5 Account for money Each board director Within three days, if possible – send
and issue license [work phone number] check to Treasury, print and mail
license
Back-up staff position
[work phone number]

6. Key Dependencies

# Upon which activities is Point of contact and contact Recovery Time Objective for the
this business process information dependency
dependent?
1 One computer system Each board director Within one week
with database access [work phone number]

Back-up staff position


[work phone number]
2 Main server Each board director Within one week

BISA 17 of 26
Nov:2022
# Upon which activities is Point of contact and contact Recovery Time Objective for the
this business process information dependency
dependent?
[work phone number]

Back-up staff position


[work phone number]
3 Printer for licenses Each board director Within one week
[work phone number]

Back-up staff position


[work phone number]
4 Website access Each board director Within one to two weeks
[work phone number]

Back-up staff position


[work phone number]
5 Ability to send checks Each board director Within one week
to Treasury and to bank [work phone number]

Back-up staff position


[work phone number]
6 Accounting function on Each board director Within two weeks
database [work phone number]

Back-up staff position


[work phone number]

7. Vital Records

Description Where Contact


Application forms – hard Directors’ offices Individual directors (see separate
copies contact list)
Application forms – word Computer system IT Manager
documents which can be [work phone number]
sent by email
Application forms – Boards’ web sites Confuzer Inc.
available on web [work phone number]
(see separate contact list for
additional contact information)
Verification materials of Directors’ offices Individual directors (see separate
other licenses contact list)

8. Equipment and Office Supplies

In order to execute this business function, the following equipment and office supplies must be
accessible.

BISA 18 of 26
Nov:2022
Description Where Contact
Computers and database Individual director offices IT Manager
for each director or shared [work phone number]
if in alternate site or office.
Printer Office – common entry area IT Manager
[work phone number]
Board stationary Storeroom Office Manager
[work phone number]
Agency seal(s) Individual director offices Office Manager
[work phone number]
License forms Storeroom Office Manager
[work phone number]
Envelopes Storeroom Office Manager
[work phone number]
Desk manual Individual director offices

9. Facilities

In order to execute this business function, the following minimum facilities are required.

Description Where Contact


Access to single computer, State Office Building if available; or Each director (see separate
printer, database designated alternate site at 1800 47th contact information)
St., Portland, OR 97213
10. Regular Suppliers and Vendors

(See separate vendor contact list for additional contact information, including emergency contact
information.)

Name of Supplier/ Vendor Key Goods or Services Provided Normal Contact Details
ABC, Inc. Paper, stationary work phone number
123 Paper Company License forms work phone number
State Seals Are Us State Seal work phone number
State Office Building Facility Maintenance work phone number
Facilities
State Office Building Phone Service work phone number
Phones

11. Alternate Suppliers and Vendors

Name of Supplier/ Vendor Key Goods or Services Provided Normal Contact Details
Staples Paper, stationary work phone number
Paper Products, United License forms work phone number
Alternate site vendor; Phones See separate contact list
individual director homes

IV. RECOVERY PLAN

BISA 19 of 26
Nov:2022
[Explanation: Decide whether to draft a recovery plan section for each critical business function,
agency division, or office location. If your agency is focused on providing a single function, it may be
appropriate to draft a single plan for your entire agency.]

This section includes the agency plan to ensure continuity of operations in any of the following
situations:
 The facility is either temporarily or permanently unavailable.
Examples might include:
 The facility being destroyed by fire and smoke damage
 The facility being temporarily unavailable due to flooding
 The facility being temporarily unavailable due to contamination

 The facility is disabled by power loss.


Examples might include:
 A generator being hit by lightning
 A car crashing into nearby electrical wires
 Severe flooding in the area

 The facility is disabled by loss of computer function.


Examples might include:
 A breech has occurred in the network and the server has been shut down due to a
computer virus
 The server gives out and must be replaced

Recovery Procedure

The recovery procedure will depend largely upon how quickly access to computers can be
restored. If remote computer access is functional, pre-identified staff will be asked to work
remotely until an alternate site is available. Communication will be conducted by phone until
computer systems are installed, or restored, to allow email communication. If computer
systems will not be available at the alternate site for more than 1 week, we will implement use
laptops and electronic forms, if available, to perform this critical business function.

When computer systems are available, work will continue at the alternate location until the
headquarters office is again available.

The recovery procedure also depends upon the length of time the power is anticipated to be out.
If we anticipate power will return in two days or less, we will use the call tree to let employees
know not to report to work until further notice, unless they will be reporting to a remote
worksite that is unaffected by the outage.

If we anticipate the power will be out longer than two days, the recovery procedure consists of
implementing manual procedures at a third party location to coordinate the conduct of audits.
Communication will be conducted by phone until computer systems are installed, or restored, to
allow e-mail communication. If computer systems will not be available at the alternate site for
more than 1 week, we will implement a paper process. When computer systems are available,

BISA 20 of 26
Nov:2022
business functions will be completed at the alternate location until the headquarters office is
again available.

The recovery procedure consists of working with IT to restore normal systems. We have a
contract with Dell that will allow us to order and receive new equipment within 48 hours. After
an emergency declaration we may purchase outside of contract if necessary to expedite
recovery. We may need temporary IT assistance to reconfigure and restore the system in a
timely fashion.
The recovery procedure depends upon the length of time the computer system is anticipated to
be out. If we anticipate restoration in two days or less, we will complete those processes that do
not require the affected computer systems.

If we anticipate the network or computer failure will exceed two days, our plan consists of
implementing manual procedures at our main office until computer systems become available.
EXAMPLE: This manual procedure was used until the new system was implemented in 2001.
Forms to conduct this process can be found in the administrative filing cabinets on the first
floor. There are several employees who were here prior to the computer system and are familiar
with the use of these forms.

When computer systems are available, all business processes will continue as normal, and all
manual/paper work will need to be recorded in the computer systems retroactively.

Recovery Location

The State Library has been designated as the alternate worksite. We have put into place an
agreement with the State Library to allow up to 10 agency personnel work space for up to 30
days. At this point, if our building is still unavailable, we will use the DAS Office Space
Request Form or the DAS Emergency Lease Form (see Appendix C) to find other
accommodations.

[Recommend inserting map showing directions to site, as well.]

Dependencies

This plan is dependent upon having the designated alternate worksite available during the time
that our facility is inaccessible. If a wide-scale disaster is the cause of the loss, our alternate site
may not be available.

This plan is dependent upon having the designated alternate worksite available, and with power,
during the time that the facility is without power. This plan is dependent on the agency power
being restored no later than 30 days after a disaster has been declared.

This plan is dependent on the functionality of remote access to allow staff to work from remote
sites. This plan is dependent on the availability of new equipment and the timeliness of
delivery.

Other Considerations

BISA 21 of 26
Nov:2022
If a wide scale disaster and/or power outage is the cause of the loss, we will revert to paper-
based methods whenever possible. In addition, we will contact our customers to let them know
of potential services delays.

Depending upon the amount of downtime, we may need to use temporary staff to assist us in
both the manual process and the process of entering all manual work into the computer system
once access is restored.

Recovery Steps – Summary

 Step 1 – Contact BCP Response Team and arrange for a meeting.


 Step 2 – BCP Response Team meets and reviews plan steps.
 Step 3 – Assess damage to agency facility.
 Step 4 – Alert alternate site location to begin setting up for incoming staff.
 Step 5 – Contact DAS Phones to redirect phone lines.
 Step 6 – Contact utility services.
 Step 7 – Meet with Alternate Site management to review operating procedure.
 Step 8 – Contact Alternate site staff and IT staff with directions for deployment.
 Step 9 – Contact IT and determine when computer services will be available.
 Step 10 – Contact customers, vendors, etc. and inform them of possible delays.
 Step 11 – Announce relocation to media outlets.
 Step 12 – Establish communication with customers at Alternate Site.
 Step 13 – Complete priority business processes at Alternate Site.
 Step 14 – Relocate remaining staff as needed, as space and capability become
available, to complete the CBF function at the Alternate Site.
 Step 15 – Notify and update users as systems become available.
 Step 16 – Resume normal operations.

BISA 22 of 26
Nov:2022
APPENDIX A:

Insert Agency Organizational Chart

(This chart can be used to show delegation of authority


or agency can insert separate chart showing lines of authority.)

BISA 23 of 26
Nov:2022
APPENDIX B:

Disaster Impact Assessment:


[Explanation: This table is intended for completion during a disaster or disruption in order to assist you in assessing the
impact of the event upon each of your critical business functions. This
table should be left blank during the plan writing, and used only during the disaster. Please note that in this table we are
interested in outage estimates rather than recovery time objectives.]

DESCRIPTION OF DISASTER/DISRUPTION:

DATE: DATE Response TEAM MOBILIZED:


BUSINESS BUSINESS STATUS LEVEL ASSESSMENT COMMENTS
FUNCTION FUNCTION (SEE TABLE CARRIED OUT
NUMBER BELOW) BY
1 2 3 4 5

THE FOLLOWING STATUS LEVELS SHOULD BE APPLIED:

LEVEL DESCRIPTION
1 Is likely to seriously affect normal business operations for over four weeks
2 Is likely to seriously affect normal business operations between one and four
weeks
3 Is likely to seriously affect normal business operations for over a week
4 Is likely to seriously affect normal business operations for less than one week
5 Is likely to seriously affect normal business operations for less than two days

BISA 24 of 26
Nov:2022

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy