"Now is the time to seriously think about what a disaster could mean for you and your organization..." Andre Palmer

1. Business Continuity
Planning
MISCONCEPTIONS OF BUSINESS CONTINUITY
ANDRE PALMER
OCTOBER 19, 2017

2. Agenda
 Overview – What is BCP?
 Common Misconceptions
 Why organizations need a strategic approach to BCP
 Business Owner and talk track
 Symptai BCP engagements

3. What is Business Continuity Planning
Business continuity Planning is a proactive business activity to identify, avoid and
mitigate risks associated with a disruption of operations.
It details steps to be taken before, during and after an event to maintain the financial and
operational viability of an organization. Disaster recovery is a reactive plan for responding
after an event.
Business continuity and disaster recovery planning are critical activities for organizations of
any size, whether it's a large enterprise or a small- to medium-sized business (SMB).
An important starting point in business continuity planning is as assessment of whether
the organization can withstand a major disaster (natural or otherwise).

4. Common Misconceptions
Business continuity planning is one of the most critical components of any recovery strategy.
Unfortunately, not every company develops a continuity plan. Here are four common
misconceptions and realities about business continuity planning….

5. Common Misconceptions
Misconception #1:
"Our people will know what to do in an emergency.“
Even the best employees cannot be expected to know what to do when disaster strikes.
Leaving each to respond in his or her own way only adds to the confusion of an event.
Having a well-documented business continuity plan in advance, and training employees to
follow it, gets everyone on the same page — helping to ensure an organized, safe and
timely recovery.

6. Common Misconceptions
Misconception #2:
"We have insurance to cover our losses.“
Insurance alone is NOT a business continuity strategy. Proper coverage is a significant and
important part of the plan. But it may not fully cover some of the peripheral damages from an
event, like loss of customers, loss of market share, or setbacks in development or release of a
new product.

7. Common Misconceptions
Misconception #3:
"We do not have the time to develop a business continuity plan.“
Time spent developing and maintaining a business continuity plan is an investment for the
company. The fixed costs will continue after an event, whether or not the organization is
open for business. The faster a company can return operations to normal, the more likely
they will be to recover from the event successfully. With so much at stake, companies simply
cannot afford to NOT have a plan.

8. Common Misconceptions
Misconception #4:
"Business continuity and disaster recovery planning are the same.“
Business continuity is a proactive plan to avoid and mitigate risks associated with a
disruption of operations. It details steps to be taken before, during and after an event to
maintain the financial viability of an organization.
Disaster recovery is a reactive plan for responding after an event. It deals with the safety and
restoration of critical personnel, locations, and operational procedures after a disaster, and is
a part of business continuity planning.

9. Useful Stats
 25% of businesses do not reopen following a major event. It does not take a major
catastrophe to shut down a business. Seemingly minor disruptions compared to
widespread natural disasters can often cause significant damage — power failures,
broken water pipes, or loss of computer data.
 A Travelers study found that 48% of small businesses are operating without any type of
business continuity plan, yet 95 percent indicated they felt they were prepared.

10. Natural Disasters & Cyber Attacks
 Natural Disasters Becoming More Common — and Costly
In 2012, nine of the top 10 most expensive world-wide natural disasters happened
in the United States. With $77 billion in insured losses worldwide, 2012 was the
third costliest year on record. The first was 2011, when $126 billion in insured
losses were reported.
 In 2016, 82% of all companies surveyed reported that there was at least
one cyber attack ATTEMPT. We do not know how many were actually
successful.

11. Who Owns this portfolio?
CEO
COO
Risk Officer
IT Director (IT Continuity Plan)
Provoking Questions:
 Is your business continuity plan predominately an insurance policy?
 Is it predominately an emergency response or evacuation plan?
 Is it predominately an IT or data recovery plan?
 Is it something you developed that sits in a binder on a shelf?

12. How can Symptai help?
Symptai has done a lot of engagements around this particular initiative over the past 20
years.
Resources: Sabina
Symptai Consulting Limited
www.symptai.com
info@Symptai.com