4th BCI NL Forum Event

4th BCI NL Forum Event11 February 2016,

COIN, Schiphol-Rijk

BCI NL Forum Event, COIN, 11 February 2016

Program

• 16:00 Welcome & Introduction

• 16.05 Update BCI BE/NL Chapter

• 16.15 Update BCI NL workgroups

• 16:40 Overview of BCM Tooling in NL

• 17.50 Presentation and Site Visit COIN

• 18.30 Networking/drinks

• 19.30 Closure


Update BCI BE/NL Chapter

BCI BE NL Chapter formed as Legal Entity (September 2015)





• 19 May 2016 - Turnhout

• Website: http://www.bcinlbeconference.org/

• Call for papers – until Friday 26 February

• Exhibitors / Sponsoring

• Early bird – until 14 March– BCI Member €200 Eur / Non Member €250 Eur

• Pre-conference training– BCI FastTrack Good Practice Guidelines Certification Course

(CBCI) and CBCI Online examination (3 days)



• European Awards – enter until 1 April 2016

• NEN update

• Business Continuity Awareness Week

• Workgroups with Genootschap voor Risicomanagement– BCM - RM Supply Chain Management

• Ron Barmentloo

– BCM – RM: 1+1 = 3

• Michael Crooymans


Status update Werkgroepen - Objective

The objective of the workgroups is: for members of the BCM Forum:

1. Combine and share knowledge, best practices and methods within the BCM field

2. Promote development of BCM profession

3. Support the skills of the profession

4. Follow up national/international developments and share the knowledge

5. Stimulate the use of scientific conclusions.


Status update Werkgroepen - Subjects

The following workgroups had been addressed in September 2014:

1. Development website BCI Chapter Belgium / the Netherlands

2. Methods - Practical experience (Lessons learned / Cases / Major incidents)

3. ISO22301 / certification

4. Tooling (BCM broad / Emergency Notification)

5. Benchmark assessment BCM Vendors

6. Legislation, Policies and Politics

7. Economic Risilience & ‘de B.V. Nederland’

8. Resilience Vital Infrastructure


Status update Werkgroepen – Role „workgroup leader“

The role of the workgroup leader is:

1. Initiate the workgroup, get commitment of workgroup-members whovolunteerd to participate and contribute

2. Address workgroup objectives and address committed plannning/timelines

3. Arrange periodical meetings and/or other participation to assure realisationof objectives and timelines

4. Present the results of the BCI forum event (April 2015) by workgroupleader/other member

Contribution to the workgroups is voluntary but not informal….


Status update Werkgroepen – Role „workgroup member“

The role of the werkgroup member is:

1. Active contriubtion to the forumlation of objectives and realisation of these objectiives, milestones and timelines

2. Share own experience/skills/knowledge in the workgroups, on personal behalf, and without ‘other’ objectives

Contribution to the workgroups is voluntary but not informal….


Work group 1

BCI Chapter Belgium/Netherlands Website

Workgroup– Chantel Bausch (Leader)

– Marcel de Ryke

– Richard Masmeijer

– Maarten Smulders

– Chris de Blende

– Marc van Doorenmaalen


Principles ‘Website’

• General information under BE/NL chapter, before login – members only.

• Specific information: presentations, cases, best practices to be published at the members only area of the BCI BE/NL Chapter site.

• The main language: English. Presentations/cases documents at members only published in its original language (English/Dutch/French).

• The BCI BE/NL Chapter site is the only official site used by the BCI BE/NL Chapter and is fully supported by The BCI (subsite of thebci.org)

• No Interactive site, link to LinkedIn groups (NL/BE) for discussions etc.

• The members only area of the site will contain a library with professional literature.


1. Library BCM literature

2. Documentation/literature specifically for the Dutch market.

3. Documentation specific cases / lessons learned

4. Events, agenda.

5. Information associated professionals (and BCI-members).

6. Documentation best practices

7. Vacancies

8. Glossary of terms

Outcome requirements Survey NL 2014


Website (printscreens)






Work group 2

Methods - Practical experience

Lessons learned / Cases / Major incidents

• Team– Michael Crooymans (Leader)

– Ron Bartmentloo

– Iwan Drost

– Maarten Geijzers

– Rubert Nieuwenhuis

– Raymond Scherpenzeel

– Alex van Os de Man


Work group 2

• Methods - Practical experience

• Description– Best practices for pragmatically setting up a BCMS

– Guidelines/checklists/templates for BIA, RA, BCP etc.

– Best practices for embedding BCM in changes/projects.

• Deliverables– A high level framework that uses the best of the existing

methods.

– A library of example guidelines/checklists/templates for BIA, RA, BCP etc


Work group 2

• Lessons learned / Cases / Major incidents

• Description– What are the best practices for learning from incidents?

– What can we learn from large incidents that have occurred?

• Deliverables– A template for incident evaluations

– A library of incident evaluations and the lessons learnt (inclmeasures)

• Status– Initial input collected

– Re-start meeting planned Feb 2016


Work group 3

• ISO 22301 / Certification

• Team– Gert Kogenhop (leader)

– Jan Frederik Prins

– Bert Tonkens

– John Groenendijk

– Eric Booltink

– Jan van Buiten

• Description– Identify and develop best practices regarding implementation of

an ISO 22301 BCMS (supporting bci GPG 2013)

– Follow and share developments regarding ISO standards (NEN)


Work group 3

• Deliverables– Sharing of supporting documents and information and giving

people the possibility to ask questions and get support.

– Share information regarding ISO developments and status new standards from inside NEN/ISO.

• Status– Document posted on website BCI NL& Be chapter.

– NEN documents delivered and regular update process in place.

Working group 3 - Closed- stopped after successful completion.


Work group 4

BCM Tooling

• Team

– Eric Booltink (leader)

– Gonzo Hartwich

– Joop Epskamp

– Maurice Maas


– Rick Kerssens

– Robert Dieben

– Theo Vesseur

• Description

– Identify and develop best practices specifications on BCI tooling

– Create a view on the development of BCI tooling


Work group 4

• Deliverables– Overview of systems requirements based on specific BCI

functionalities.

– MoSCoW qualification.

• Status– Phase 1 finished

– Next step is a demonstration at the BCI NL meeting 11 Feb.


Work group 4 results 1

• BCI-core process requirements :– Supporting BIA.

– Supporting Risk Analysis.

– Supporting Planning Functionalities.

– Supporting Crisis notification.

– Supporting the Recovery process.

• BCI overall requirements:– General

– Technical

– Security

• Mapping standards


Work group 5

• Benchmark Assessment of External Vendors– Michael Crooymans (Leader)

– Karel Jasperse

– Remco Verkoeijen

– Rubert Nieuwenhuis

– Iwan Drost

– Fred Benschop

– Alex van Os de Man

• Description– Identify and develop best practices regarding management of

continuity risks of suppliers and supplier continuity management.

– Checklist for assessing the (current) continuity of a supplier.


Work group 5

• Deliverables– Guidelines to help an organisation assess the critical suppliers

and develop an adequate strategy for these.

• References per sector

– Guidelines and checklist for assessing the continuity of suppliers.

• Status– Initial input collected

– Re-start meeting planned Feb 2016


Work groups 6,7,8…. R.I.P

• WG6: Legislation, Policies and Politics

– Alexander Haccou (leader)

– Yvonne ter Bliek

– Monica de Wit

– Lambrecht Nieuwenhuize

• WG7: Economic Resilience

– Eelco Dijkstra (leader)

– Marcel de Graaf

– John Forcelledo

– Marc van Doorenmaalen

• WG8: Intersectoral Cooperation/Consequence Management

– Tom Bakker (leader)

– Alex Hoogteijling


Thanks for your attention!

Questions ?


Update Work group 4 - Tooling

• Business Continuity tooling

• Team

– Eric Booltink (coord. coreteam)

– Gonzo Hartwich Nunes

– Joop Epskamp

– Maurice Maas


– Rick Kerssens

– Robert Dieben

– Theo Vesseur

• Description

– Identify and develop best practices specifications on BC tooling

– Create a view on the development of BC tooling


Work group 4 - Tooling

• Objectives:– “Ter ondersteuning van het selectieproces een objectief overzicht en inzicht geven in het aanbod van BCM

tooling met focus op de belangrijkste gebruikersdoelen en hoe geschikt deze tooling zijn voor de kernactiviteiten van de Business Continuity Manager met onderbouwing van eisen/wensen en geboden oplossingen voor de (BCM) organisatie”

– “To support the evaluation and selection process of Business Continuity Tooling and to present an objectiveoverview of the various automated BC/DR software solutions. The primary focus is to highlight the most important requirements of an automated tool and to demonstrate the usability of this tooling in support of the core activities of the Business Continuity Manager while contributing to the demands and needs of the (BCM) organization“

• Deliverables:– Overview of functional BCM tooling requirements based on

specific BC functionalities.

– MoSCoW qualification.



• BC-core process requirements:– Supporting BIA.

– Supporting Risk Analysis.

– Supporting Planning Functionalities.

– Supporting Crisis notification.

– Supporting the Recovery process.

• BC overall requirements:– General

– Technical

– Security



• Input:– Several RFP’s, RFI’s – partly from this audience

• Excel – version 1.0:– Functional requirements per focus area

– Calculations and rating included

– MoSCoW qualification

– High-level functionalities based on CIR – magazine BCM tooling suppliers (no GRC-software)

à From an excel to a web-portal



• Assessment Tool – version 0.1 :– Migrating functional requirements from Excel

– Different roles

• Supplier is able to complete information

• User is able to select information based on user specific functional criteria

• Ranking is presented based on MoSCoW

• Several reporting possibilities and dashboard views

• Out of scope– Pricing

– Support and conditions



• DEMO by Gonzo

• Questions at the end of the demo

•BCI NL Forum event•11 February 2016

•What challenges does a company encounter during and after a disaster?

•By Karel Jasperse

•COIN B.V.


• Established in 2003

• Independent supplier of Business Continuity

• 100% focus on Business Continuity

• Workstations, IT, telephony and consultancy service

• Customer’s business processes are key

• Multiple recovery location in the Netherlands and Belgium:

Ø large number of work stations (1500+)

Ø Geographically spread

Ø All location connected in central redundant network

Ø availability guaranteed

Ø Overflow

• Anonymity:

Ø protests

Ø unwanted media attention

• Flexible: seamless integration with existing facilities

• Multiple recoveries managed simultaneously

• Experienced partner

• Pragmatic

•About COIN

Office locationCustomer

1Gbps

•External datacenter

Prepared connection

COIN recovery location

Recovery Servers•Local IT + off-site

back-up

Cloud

Back-up Service Telephony

Optional

Fixed connection

•Types of customers and COIN network

•Disaster - customer 1

•Disaster – customer 2

During the disaster:

• Electricity cut off

• Authorities are in charge

• Office for days/week inaccessible

• The shorter the communication line, the better

• Prevent incorrect communication to press

• Fire extinguishing water causes damage

• Business trip booked; passports located in the office

• Furniture was melted into the concrete

• Trained and devoted CMT is critical

• Incorrect decision is better than no decision

• IT stored locally, partly damaged but power was cut off for some time.

After the calamity:

• Authorities have different interests; safety first than access to building

• Transportation to recovery location; first days a bus, then public transport

• Removing chemical extinguishing water

• Limit media attention; do not make customers worry for no reason

• Cheer ups for employees are critical; they must have the bonding feeling. Organizing ‘all employee’ meeting helps

• Working from home is hard to coordinate; employees will easily feel shut out

• Lots of practical questions => make a FAQ

• Helpdesk service point is important

• Proactive communication prevents lots of calls

• IT is vital; it should be safe outside of the office location

Preferences during a long term disaster:

• Personalizing office environment

• Floorplans will change various times

• To feel connected to the company/brand they want to put signage

• Fine tune reception and security

• Lunch options

• Single point of contact for facilities

• cleaning

• waste (paper, plastic etc.)

• mail

• Single point of contact for IT and telephony

Moving back to own location:

• Plan the move back thoroughly

• Take your time to prepare and test the new facilities

• Use the awareness:

• Use the opportunity to improve the facilities and IT in this situation, the ‘business as usual’ takes too much time to focus on improvements

• Ensure all changes made in IT, facilities etc. during the disaster are also taken into consideration when moving back to your own location

• Update the BIA and BCP with the ‘lessons learned’


•COIN B.V.

•Tupolevlaan 41-63

•1119 NW, Schiphol-Rijk

•088 – 26 46 000

•[email protected]