Measure and Evaluate Business Continuity Planning

In order to fully evaluate the impact of Business Continuity Planning initiatives it is necessary to undertake, where possible, a quantitative assessment of their impact and assign calculable values. The following provide some simple ideas/standards against which BCP effectiveness may be measured/monitored:

Loss/unavailability of information, desired restoration times e.g.:

• Financial records back on line within 2 hours from disruption.

• Customer files back on line within 4 hours.

• Staff locations, status of operations, status of disaster available immediately via mobile phone, Web site, emergency call centre, e-mail.

Loss of access to buildings, desired alternative sites established for operations to continue e.g.:

• Alternative sites for business in operation within 2 hours, Home based sites able to operate within 1 hour.

• Information Technology and Communications equipment at alternative sites in operation within 1 hour, or operational immediately using hot standby equipment.

• Key executive and coordinating personnel to be operating from an alternative site within 2 hours

• Front line personnel operational within 4 hours

• Customer service staff operational from home within 4 hours

Loss of people, replacement staff to take up roles as follows:

• Key executive and coordinating personnel replacements available within 1 hour 

• Field personnel replacements available within 4 hours.

• Customer service replacement staff available within 4 hours.

• Key administrative personnel replaced within 4 hours

Loss of Services, acceptable service disruption period e.g.: minutes, or hours, elapsed from the disruption to full restoration of services. This measure may comprise time bands associated with various services e.g. :

• Time to respond to emergencies: minutes/hours from receipt of advice concerning disaster to initiating resolution.

• Percentage of Services restored within acceptable time span e.g
• 80% restored within 2 hours,
  
• 90% within 3 Hours, and
  
• 100% within 12 hours

Advice to general public/customers, e.g. information released using radio, television, email, Web site, etc concerning the status of the emergency event e.g..

• Expected restoration time e.g. 6 hours, Status update times and sources e.g. every half hour on local radio station.

• Locations where advice and help can be received, e.g. help desk number, Web site.