:: The Methodology ::

Stemming from our experience of providing BCM related services to the local financial services industry for the past 11 years in both banking and insurance sector, ISL’s has carefully engineered a BCM development methodology. ISL’s BCM methodology is in line with industry best practices and framework namely the requirements of Disaster Recovery Institute (DRI – US), Business Continuity Institute (BCI –UK), Information Systems Audit and Control Association –(ISACA-US) as well as the local Bank Negara Malaysia requirements.

ISL’s 10 phased methodology is strongly aligned to international standards, best practices and frameworks. This is done consciously so that ISL’s methodology can be easy deployed to meet customer preferences towards certain standards or models

The most commonly used industry standards are from the Disaster Recovery Institute, Business Continuity Institute, Information Systems Audit and Control Association. We have also included Bank Negara Malaysia regulations for developing the BCM plan.

With this approach, ISL is confident that our methodology offers the right balance of best practices in developing a Business Continuity Plan. Our research and effort will ensure that our customers receive only the best from us.

PHASE 1 – Understand BCM Components
Based on the strategies adopted in the previous phase, design and develop the recovery plan within the scope of the identified recovery facilities.

PHASE 2 – Obtain Top Level Commitment
This phase, largely involves the top level management’s commitment for the BCP effort. We are looking at producing high level policy statements as well as detailed objectives to be developed for each critical business functions.

PHASE 3 – Business Continuity Plan Initiation
The main idea of Phase 3 is the formation of the steering committee which oversees the progress of the BCP task force activities. We will also be working on the best approach in devising the BCP plan. The most suitable methodology will be determined and project management approach will also be finalized.

PHASE 4 – Risk Assessment
The most critical phase of the project begins here in determining the risks associated to the organization. The impact and probability of each risk is analyzed, ranked and prioritized. Mitigation plans are drawn up to reduce the impact of the risks to the organization.

PHASE 5 – Business Impact Analysis
Business Impact Analysis needs to be assessed organization wide to determine the scope of risks that may arise in case of a business disaster. It will be carried out by means of interviews which each organization department’s business owner and identifying all associated business and commercial risks. Recovery Time Objectives (RTO) and Recovery Point Objectives PO) are amongst critical parameters that would be finalized in the phase.

PHASE 6 – Business Continuity Strategy Development
This phase identifies Business Continuity strategies that need to be adopted by the organization when faced with a disaster. Alternate Recovery facilities analysis is carried out to ensure that, the best strategy is put in place.

PHASE 7 – Development & Implementation
This phase involves creation of various action plan templates and subsequent dissemination of the plan to all staffs. This is to ensure that the BCP is well understood throughout the organization.

PHASE 8 – Test & Maintain
This phase deals with the requirements of executing the BCP plan and ensuring maintenance of the plan so that the reliability of the documentation is achieved.

PHASE 9 – Communication Awareness
This phase relates to independent audit processes which may arise when requested by the client.

PHASE 10 – Independent Audit (If Required)
This phase relates to independent audit processes which may arise when requested by the client.