Service Offerings

Our Service Offerings are listed according to the six BCI Professional Practice areas.

Implementation
Custom Crisis Management Plans

In order to be fully prepared for a crisis, your organization must have an effective Crisis Management Plan.  Crisis Management Plans are not a ‘cookie cutter’, ‘one size fits all’ commodity.  We will work with your organization to gather requirements to build a customized plan that includes key components that will help you effectively respond to a crisis.

 
Custom Cybersecurity Response Plans (Crisis Management)

An extension of the Crisis Management Plan is the Cybersecurity Response Plan.  This can be provided as an add on to your existing Crisis Management Plan as a guide for handling cyberattacks.  The Response Plan allows you to define default positions to key questions you will likely face during a cyberattack, based on your organization’s principles and philosophies.

Custom Business Continuity Plans

Each department with a crisis business process should have a Business Continuity Plan.  Ideally, these plans follow a common approach or template.  The Business Continuity Plan should address the continued operation of critical business processes in the event of a lost facility or critical systems.  The plans should include directions for how to respond and how to communicate with the team.

Using an approach similar to the development of Crisis Management Plans, we would help you define a common template and develop department specific plans to keep critical business processes running.

Program Design & Management
11 Point Program Assessment

This review of your Business Continuity / Crisis Management Program aims to help your organization understand the overall maturity of your Program across 11 key measurement areas.  The Program Assessment focuses on governance, business continuity readiness, crisis management and follows key professional practices as defined by BCI and DRI. 
 

Program Framework / Governance

Too often, organizations treat Business Continuity and Crisis Management as a series of ad-hoc events, rather than a cohesive program.  This initiative is intended to work collaboratively with your business leaders to build a Program Governance Model that will allow your organization to run a sustainable Business Continuity or Crisis Management Program.

Training
Crisis Management Training

Using your internal Crisis Management Plan as the reference material, this customized training is intended to meet the specific needs of your organization.  The training begins with the fundamentals of crisis management and then addresses the specifics of your Crisis Management Plan including roles and responsibilities, processes and more.  Typical audience:  BCP Teams and Crisis Management Teams.

Business Continuity Training

Using your internal Business Continuity Plans as the reference material, this customized training is intended to meet the specific needs of your organization.  The training begins with the fundamentals of business continuity and then addresses the specifics of your Business Continuity Plan including roles and responsibilities, processes and more.  Typical audience: BCP Teams and those who will execute Business Continuity Plans in your organization.

Analysis
Business Impact Analysis (BIA)

A core component of any Business Continuity Program is the Business Impact Analysis (BIA).  Data collected during the BIA becomes the backbone of the program and is used to develop business continuity strategies, establish disaster recovery requirements, provide detailed context for Business Continuity Plans and can help your leadership team understand impact during a crisis.

 
Disaster Recovery Gap Analysis / Recoverability Assessment

It is important to understand your organization’s exposure to system downtime.  Using system requirements identified in the Business Impact Analysis, we work with your Information Technologies team to understand disaster recovery capability for each identified business application.  Once we’ve identified any gaps, we cross reference that information against the Impact Profile produced in the BIA to understand the residual risk to your organization.

Design
Strategic Design
An important part of Program development is the establishment of recovery strategies across the organization.  Using data gathered in a Business Impact Analysis (a pre-requisite for this step), Strategic Design of custom business continuity strategies are based on requirements defined in your Business Impact Analysis.
Validation
Tabletop Exercises

The old saying that ‘practice makes perfect’ rings true when it comes to effective execution of crisis related plans.  Often, teams have plans and feel like they are prepared, but they either haven’t exercised their plans or haven’t done so effectively.  They key is to build a plausible exercise scenario that tests the effectiveness of your organization’s plan(s) and improves the readiness of the team.  Follows an industry leading practice on exercise plann, execution, monitoring and reporting, with clearly defined objectives and measurement criteria. 

 
Crisis Management / Business Continuity Consulting

In addition to the services listed above, Mark Hoffman is also available for part-time staff augmentation or other general consulting as required.