SLIDE 1
12 Months of Disruption, 12 Months of Learning
Brian Zawada (FBCI) Managing Director and Chief Visionary Officer Avalution Consulting LLC June 2018
Introduction
2
- Here’s what I do:
12 Months of Learning Brian Zawada (FBCI) Managing Director and - - PowerPoint PPT Presentation
12 Months of Learning Brian Zawada (FBCI) Managing Director and - - PowerPoint PPT Presentation
12 Months of Disruption, 12 Months of Learning Brian Zawada (FBCI) Managing Director and Chief Visionary Officer Avalution Consulting LLC June 2018 Introduction Heres what I do: Help build business continuity programs Help
SLIDE 2
SLIDE 3
Agenda
3
- Review recent disruptions
- Discuss BCI research report findings
- Introduce my “Top 5” recommendations
- Talk about two more things
- Discussion
SLIDE 4
Caveats
4
- I don’t advocate that anyone build threat
specific plans
- However, evaluating threats helps us:
– Eliminate blind spots – Field executive questions – Build better exercises – Determine if we need any specialized response procedures – Learn from others’ mistakes
SLIDE 5
Avalution.participoll.com
5
SLIDE 6
What worries you the most?
6
- A. Cyber attack
- B. IT Disruption
- C. Utility Disruption
- D. Supply Chain Disruption
- E. Adverse Weather
- F. Terrorism
A B C D E F
SLIDE 7
7
SLIDE 8
8
SLIDE 9
9
SLIDE 10
10
SLIDE 11
11
SLIDE 12
12
SLIDE 13
13
SLIDE 14
14
SLIDE 15
BCI Horizon Scan Report (2018)
15
SLIDE 16
BCI Horizon Scan Report (2018)
16
SLIDE 17
BCI Supply Chain Resilience Report (2017)
17
SLIDE 18
BCI Supply Chain Resilience Report (2017)
18
SLIDE 19
My Top 5 Recommendations
19
- 1. Proactively influence strategy (rather than
react to risky decisions)
- 2. Make vulnerability transparent
- 3. Do something about the supply chain
- 4. Plan with the CISO
- 5. Be threat agnostic
SLIDE 20
BCI Horizon Scan Report (2018)
20
SLIDE 21
Before We Conclude…
21
SLIDE 22
The Business Impact Analysis…
22
- A. I think the BIA is important because it helps my
- rganization identify business continuity
requirements
- B. The BIA is an out of date practice because estimating
impact is a guess (at best)
- C. The BIA is an out of date practice because defining
business requirements is situation dependent
- D. Other (ask me later)
A B C D
SLIDE 23
23
SLIDE 24
What is the hardest part of our job as a business continuity practitioner?
24
- A. Designing the business continuity program
- B. Implementing the business continuity program
(performing the business continuity planning process)
- C. Managing the business continuity program long-term
(continually improving the outcomes and staying engaged with management)
A B C
SLIDE 25
Questions and Discussion
25