Business Continuity Plans

What do we do?

We help organizations to develop plans to prepare for, react to and recover from major disasters that affect normal operations of the organization and the delivery of essential or critical services to clients. Business continuity planning is one of the most critical components of any recovery strategy. Unfortunately, not every company develops a Business continuity plan.

All organizations, public and private face an unprecedented number of exposures. The frequency and severity of weather-related events seem to be increasing, deadly attacks by terrorists or lone actors, and reliance on a complex network of technologies and supply chains is expanding. All of trends leave businesses susceptible to a variety of existing and emerging risks. Managing these risks by developing a business continuity strategy is key to the survival of any organization.

Here are a few misconceptions and realities about business continuity planning:

Even with a Plan, our people will know what to do in an emergency.

Even the best employees cannot be expected to know what to do when disaster strikes. Leaving each to respond in his or her own way only adds to the confusion of an event. Having a well-documented business continuity plan in advance, and training your employees to follow it, gets everyone on the same page — helping to ensure an organized, safe and timely recovery.

We have insurance to cover our losses.

Insurance alone is not a business continuity strategy. Proper coverage is a significant and important part of the plan. But it may not fully cover some of the peripheral damages from an event, like loss of customers, loss of market share, or setbacks in development or release of a new product.

We do not have the time to develop a business continuity plan.

Time spent developing and maintaining a business continuity plan is an investment in your organization. Your fixed costs will continue after an event, whether or not you are open for business. The faster you can return your operations to normal, the more likely you will recover from the event successfully. With so much at stake, your organization cannot afford to NOT have a plan.

Business continuity and disaster recovery planning are the same.

Business continuity is a proactive plan to avoid and mitigate risks associated with a disruption of operations. It details steps to be taken before, during and after an event to maintain the financial viability of an organization.

Disaster recovery is a reactive plan for responding after an event. It deals with the safety and restoration of critical personnel, locations, and operational procedures after a disaster, and is a part of business continuity planning

How we do it?

RHEA has acquired the services of highly experienced and qualified Security professionals who either oversaw, guided or led working groups in the conception of a Business Continuity Plan (BCP) or created one themselves for their organization. They are familiar with the BCP concept, requirements and contents. These selected individuals have been assigned to complete similar projects for specific clients due to their knowledge and expertise in this area of security.

They will:

1.  Establish Control

BCP contains a governance structure often in the form of a committee that will ensure senior management commitments and define senior management roles and responsibilities. The BCP senior management committee is responsible for the oversight, initiation, planning, approval, testing and audit of the BCP. It also implements the BCP, coordinates activities, approves the BIA survey, oversees the creation of continuity plans and reviews the results of quality assurance activities.

2. Conduct a Business Impact Analysis (BIA)

The purpose of the BIA is to identify the organization's mandate and critical services or products; rank the order of priority of services or products for continuous delivery or rapid recovery; and identify internal and external impacts of disruptions

They will:

  • Identify the mandate and critical aspects of an organization
  • Prioritize critical services or products
  • Identify impacts of disruptions
  • Identify areas of potential revenue loss
  • Identify additional expenses
  • Identify intangible losses
  • Identify insurance requirements
  • Produce rankings for the critical business services or products
  • Identify dependencies (internal & external)

3. Prepare a Business Continuity Plan

This step consists of the preparation of detailed response/recovery plans and arrangements to ensure continuity. These plans and arrangements detail the ways and means to ensure critical services and products are delivered at a minimum service levels within tolerable down times. Continuity plans should be made for each critical service or product.

They will:

  • Mitigate threats and risks
  • Analyze current recovery capabilities
  • Create continuity plans
  • Create Response preparation
  • Prepare Alternate facilities

4. Provide Readiness Procedures and Trainings

5. Provide Quality Assurance Techniques

What do we deliver?

We will deliver the following:

A complete Business Continuity Plan (BCP) that includes:

  • BCP Governance;
  • Business Impact Analysis (BIA);
  • Plans, measures, and arrangements for business continuity;
  • Readiness Procedures; and
  • Quality assurance technique (exercises, maintenance and auditing).

What projects have we delivered?

RHEA Inc. delivered Business Continuity and Business Impact Analysis to many Federal Government departments and agencies, always ensuring their total satisfaction. Our list of clients includes:

  • Natural Resources Canada (NRCan)
  • Shared Services Canada (SSC)
  • Ask RHEA
  • Ask CI