Reference no: EM133773090

Service and Operations Management in IT

Business continuity plan design

Your Task

Choose and describe your organisation, including the industry it is in and background of the organisation
Conduct a risk management plan
Conduct business impact analysis
Conduct incident response plan
Conduct a recovery plan

Assessment Description

Adverse events could cause significant disruptions to a business. Your task is to select an organisation of your choice and consider adverse events that would lead to significant disruption of the business. Then, you are to conduct a management plan to discuss the impact to the business, incident response and recovery plan which to bring the business back to normal conditions.

Learning outcome 1: Analyse the organisational and people factors that influence the delivery and operationalisation of IT services.
Learning outcome 2: Determine the information and technological requirements for effective IT service delivery in diverse organisational contexts.
Learning outcome 3: Evaluate the performance of partners and suppliers in ensuring the effective delivery of IT services within organisations.
Learning outcome 3: Design IT value streams and processes that underpin an organisation's products and services.

Assessment Instructions
Students must conduct research externally and included references in order to produce a well referenced case study. You should use at least ten (10) sources of information and reference these in accordance with the Kaplan Harvard Referencing Style. These may include websites, social media sites, industry reports, census data, journal articles, and newspaper articles. These references should be presented as in-text citations and a referencing list at the end of your assessment (not included in the word limit). Wikipedia and other ‘popular' sites are not to be used.

Select an organisation of your choice (it has to be a real company in Australia), discuss the industry and the business it is in and how it is particularly vulnerable to business disruptions and disasters.

Part One - Risk management plan
Identify and analyse events that affect your business adversely and evaluate measures to deal with each of these identified risks.
A minimum of 5 risks needs to be identified.
Use the following risk management matrix when conducting your risk analysis:

Part Two - Business impact analysis
Business Impact Analysis uses information in your Risk Management Plan (Part One) to assess identified risks and impacts against critical activities of your business and determine basic recovery requirements.

Critical activities are primary business functions that must continue to allow your business to continue to operate.

You need to include the following in your business impact analysis:
Identify 4 critical business activities of your business.
Impact to the business in the event of disruption.
Length of time the business can survive without performing this activity.

Assignment of Recovery Time Objectives (RTO) to each function, which is defined as time from declaration of a crisis/disaster to time the critical business function return fully operational to avoid serious financial loss.

Part Three - Incident response plan
Prepare a plan which allow timely response to 4 types of critical incidents and reduce the impact of those incidents on business operations identified in Part Two.

Part Four - Recovery plan
Recovery is returning to the condition before the emergency. Primary focus should be on performance of critical activities as soon as possible after a critical incident.

Students are expected to complete in the template recovery support in ‘worst case' scenarios, and includes the following:
Strategies to recover business activities in the quickest possible time.
Identifying resources required to recover operations.
List the positions responsible and have an anticipated completion date/time.

Part Five - Reflection

The four pillars of a BCP are assessment, preparedness, response, and recovery. In light with the specific industry your company is in, provide ONE (1) recommendation with explanation on how your company can improve in its readiness in each of the pillars of BCP.