ISO 22301 Awareness and Auditor Training Presentation Kit

1. P Punyam unyam M Management anagement S Services ervices P Pvt. vt. L Ltd. td. Punyam Click to edit Master title style Click to edit Master title style • Click to edit Master text styles – Second level • Third level – Fourth level » Fifth level • Fourth level • Fifth level • Click to edit Master text styles • Second level • Third level 6/1/2018 6/1/2018 GMG 1 Copyrights 2017 @ I Global Manager Group | sales@globalmanagergroup.com | 1 1

2. P Punyam unyam M Management anagement S Services ervices P Pvt. vt. L Ltd. td. Punyam What is ISO 22301 Click to edit Master title style Click to edit Master title style • Click to edit Master text styles – Second level • Third level – Fourth level » Fifth level • Fourth level • Fifth level  The ISO 22301 standard provide a framework for allowing business to increase resilience and enables an organization to effectively deal with a disruptive incident.  ISO 22301 can be summarised as:  A standard to provide the best possible framework for managing business continuity within the organization. • Click to edit Master text styles • Second level • Third level  A set of “controls” against which an organization can be assessed for effective Business continuity. 6/1/2018 6/1/2018 GMG 2 Copyrights 2017 @ I Global Manager Group | sales@globalmanagergroup.com | 2 2

3. P Punyam unyam M Management anagement S Services ervices P Pvt. vt. L Ltd. td. Punyam Click to edit Master title style Click to edit Master title style What is Risk Management? • Click to edit Master text styles – Second level • Third level – Fourth level » Fifth level • Fourth level • Fifth level minimizing or eliminating security risks that may affect information systems, for an acceptable cost “ Risk Management • Click to edit Master text styles • Second level • Third level “ Process of identifying, controlling and  What is Risk Management? 6/1/2018 6/1/2018 GMG 3 Copyrights 2017 @ I Global Manager Group | sales@globalmanagergroup.com | 3 3

4. P Punyam unyam M Management anagement S Services ervices P Pvt. vt. L Ltd. td. Punyam Click to edit Master title style Click to edit Master title style Implementation of ISO 22301 BCMS • Click to edit Master text styles – Second level • Third level – Fourth level » Fifth level • Fourth level • Fifth level • Click to edit Master text styles • Second level • Third level consult (management, stakeholders, users etc.) POLICY Improve BCMS - Identify improvements in the BCMS and implement them - Take appropriate corrective and preventive actions - Communicate and Establish the context -Need for business continuity as a business need -BCMS scope and policy -Methodology/ Approach to risk management Risk identification and assessment - Identify risks - Analyse risks - Evaluate Continuous Improvement managing the risks - Select controls and objectives and controls for the treatment and management of risk - Implement selected controls Manage the risk - Identify and evaluate options for Monitor and review BCMS 6/1/2018 6/1/2018 GMG 4 Copyrights 2017 @ I Global Manager Group | sales@globalmanagergroup.com | 4 4

5. P Punyam unyam M Management anagement S Services ervices P Pvt. vt. L Ltd. td. Risk treatment chart Punyam Click to edit Master title style Click to edit Master title style • Click to edit Master text styles – Second level • Third level – Fourth level » Fifth level • Fourth level • Fifth level • Click to edit Master text styles • Second level • Third level 6/1/2018 6/1/2018 GMG 5 Copyrights 2017 @ I Global Manager Group | sales@globalmanagergroup.com | 5 5

6. P Punyam unyam M Management Business Impact Analysis process flow chart anagement S Services ervices P Pvt. vt. L Ltd. td. Punyam Click to edit Master title style Click to edit Master title style • Click to edit Master text styles – Second level • Third level – Fourth level » Fifth level • Fourth level • Fifth level • Click to edit Master text styles • Second level • Third level 6/1/2018 6/1/2018 GMG 6 Copyrights 2017 @ I Global Manager Group | sales@globalmanagergroup.com | 6 6

7. P Punyam unyam M Management 4 TIER ISO 22301 DOCUMENTATION STRUCTURE anagement S Services ervices P Pvt. vt. L Ltd. td. Punyam Click to edit Master title style Click to edit Master title style • Click to edit Master text styles – Second level • Third level – Fourth level » Fifth level • Fourth level • Fifth level Work Instruction/SOP/Process flow BCMS • Click to edit Master text styles • Second level • Third level Manual Procedures charts/other documents BCMS Records Admin Marketing Purchasing Testing Delivery Data Software Development Processing 6/1/2018 6/1/2018 GMG 7 Copyrights 2017 @ I Global Manager Group | sales@globalmanagergroup.com | 7 7

8. P Punyam unyam M Management BCMS certification to ISO 22301 anagement S Services ervices P Pvt. vt. L Ltd. td. Punyam Click to edit Master title style Click to edit Master title style Business Continuity Policy Document • Click to edit Master text styles – Second level • Third level – Fourth level » Fifth level • Fourth level • Fifth level Business Continuity Policy • Click to edit Master text styles • Second level • Third level Risk Analysis BCMS Scope Definition of Scope of the BCMS Risk Management Options Specific Choice BCMS Goals and Measures Reasoning for Choice Reasoning 6/1/2018 6/1/2018 GMG 8 Copyrights 2017 @ I Global Manager Group | sales@globalmanagergroup.com | 8 8

9. P Punyam unyam M Management anagement S Services ervices P Pvt. vt. L Ltd. td. ISO 22301 Auditor’s Quality Punyam Click to edit Master title style Click to edit Master title style 1. Wise & alert : ability to adapt to different people & situations. 2. Appropriate industrial experience. 3. Ability to question to ascertain facts. 4. Ability to listen. Not prepare next question while listening to an answer. 5. Interested in the explanation. 6. Knowledge of BCMS system standards & of assessment & audit techniques. 7. Analytical brain. 8. Sensitive to feelings, attitudes & motives so as to understand what people mean when they say something. 9. Maintains eye contact. 10. Ability to discuss without arguing. 11. Neither approves not disapproves. • Click to edit Master text styles – Second level • Third level – Fourth level » Fifth level • Fourth level • Fifth level • Click to edit Master text styles • Second level • Third level 6/1/2018 6/1/2018 GMG 9 Copyrights 2017 @ I Global Manager Group | sales@globalmanagergroup.com | 9 9

10. P Punyam unyam M Management STEPS FOR INSTALLATION OF ISO:22301 BUSINESS CONTINUITY MANAGEMENT SYSTEM anagement S Services ervices P Pvt. vt. L Ltd. td. Punyam Click to edit Master title style Click to edit Master title style  Identification of All Possible business continuity risks to the company.  Conduct ISO:22301 awareness program (top + middle + bottom level).  Form a steering committee and task force for documentation • Click to edit Master text styles – Second level • Third level – Fourth level » Fifth level • Fourth level • Fifth level  Take corrective actions for non-conformities.  Define business continuity Policy, Objectives and Targets. • Click to edit Master text styles • Second level • Third level Implementation of business continuity programme.  Prepare documents of business continuity management system, Records, Legal Requirements.  Train all for business continuity Policy and for achieving Objectives & Targets.  Communication to all including Suppliers and Interested parties.  Implementation & train all personnel in the use of procedures & formats. Preparation and  Train internal auditors.  Assess the system through first internal audit.  Apply for certification.  Conduct management review meeting for BMS system  Avail onsite document adequacy of certifying body.  Take actions on suggestions given by them.  Final audit by certifying body. 6/1/2018 6/1/2018 GMG 10 Copyrights 2017 @ I Global Manager Group | sales@globalmanagergroup.com | 10 10