A2319C: With Reference to your Current OR Previous Ccompany (the Company) and its Operations, Perform the Following Tasks as a Business Continuity Management (BCM) Practitioner: Business Continuity Management Coursework, RP, Singapore

Question 1

With reference to your current OR previous company (the Company) and its operations, perform the following tasks as a Business Continuity Management (BCM) practitioner.

Perform an evaluation on

• Risk Assessment (RA), and
• Business Impact Analysis (BIA).

Points to note:

Provide a short introduction of the Company, its operations and the activities that take place within the Company.

Determine the Business Continuity Objective (BCO) for the Company prior to performing both evaluations. Explain why your BCO is relevant to the Company.

For Item (1):

i) You may develop a template to complete this task. The template should cover minimally these SIXitems: threats/risk factors, impact, likelihood, severity, risk rating, risk treatment.

ii) Include tables used for determining likelihood, severity and risk ratings.

iii) Identify at least two natural and TWOman-made threats.

For Item (2):

i) Identify a least one specific department/section within the Company to complete this task.

ii) Identify at least FOUR prioritised activities and their relevant Maximum Tolerable Period of Disruption (MTPD) and Recovery Time Objective (RTO).

iii) Perform impact analysis, analyse the interdependencies and identify the resources needed to carry out the prioritised activities.

iv) Include tables to determine the severity rating.

Question 2

Based on the specific department/section of the Company identified in Question 1 and the outcome of the Business Impact Analysis (BIA) conducted:

Identify TWO prioritised activities that you listed in Question 1 d (ii). For each of the prioritised activities, determine its recovery strategy. Explain your answer.

For the TWOprioritised activities in Question 2 part (a), detail the recovery steps in the event that the Business Continuity Plan(s) (BCP) is activated. Include the specific timeline and person in charge for each recovery step.