CPPDSM: Business Continuity Plan Report - Risk, Response, and Recovery

This document presents a comprehensive Business Continuity Plan (BCP) for the CPPDSM course, focusing on the real estate industry. The report begins with an introduction and table of contents, followed by Summative Assessment 1, which addresses various risk factors such as operational, financial, social, and client risks, providing mitigation strategies for each. Summative Assessment 2 includes a project based on Queensland Government resources, detailing a BCP template with sections on risk management planning, business impact analysis, incident response, and recovery plans. The plan incorporates the PPRR (Prevention, Preparedness, Response, and Recovery) framework, offering guidance on identifying risks, assessing impacts, and developing strategies for business continuity. The report also covers insurance policies, data security, and backup strategies, alongside incident response checklists, recovery procedures, and contact information. The final section emphasizes the importance of regular reviews and updates to ensure the BCP's effectiveness.

CPPDSM

Table of Contents
SUMMATIVE ASSESSMENT 1....................................................................................................4
Question 1:..............................................................................................................................4
Question 2:..............................................................................................................................4
Question 3:..............................................................................................................................4
SUMMATIVE ASSESSMENT 2....................................................................................................5
Project 1.................................................................................................................................5
Project 2.................................................................................................................................5
Introduction......................................................................................................................................3
Developing a Business Continuity Plan.................................................................................3
Business Continuity Plan.................................................................................................................6
Distribution List.................................................................................................................7
Name.....................................................................................................7
References and related documents.....................................................................................7
Section 1...........................................................................................................................................8
Executive Summary (optional)..........................................................................................8
Objectives..........................................................................................................................8
Glossary.............................................................................................................................8
Section 2.........................................................................................................................................11
Risk Management Planning..................................................................................................11
Risk Management Plan...........................................................................................12
Insurance..........................................................................................................................14
Data security and backup strategy...................................................................................14
Section 3.........................................................................................................................................15
Business Impact Analysis.....................................................................................................15
Business Impact Analysis................................................................................................19
Section 4.........................................................................................................................................20
Incident Response Plan.........................................................................................................20
Immediate Response Checklist........................................................................................20
Evacuation Procedures.....................................................................................................21

Emergency kit..................................................................................................................21
Roles and Responsibilities...............................................................................................23
Key Contact Sheet...........................................................................................................24
Event Log........................................................................................................................25
Section 5.........................................................................................................................................26
Recovery...............................................................................................................................26
Recovery Plan..................................................................................................................27
Incident Recovery Checklist............................................................................................28
Recovery contacts............................................................................................................29
Market assessment...........................................................................................................29
Section 6.........................................................................................................................................31
Rehearse, Maintain and Review...........................................................................................31
Training schedule.............................................................................................................31
Review schedule..............................................................................................................31

SUMMATIVE ASSESSMENT 1
Question 1:
Risk factor can defined as a condition which possess chances of losing a value. It is
directly affects the profitability of a business and can provide positive as well as negative
outcomes. The risk factors in respect to real estate agency are as follows:
 Operational risk: This risk is high as there is no proper system of managing the
activities. Clients who have complained Kurt, never received any response which
increased their difficulties this caused arise of legal case situations. Along with
this, money from company's official account was withdrawn to save the Porche
from being seized.
 Financial risk: An overstated operating statement was presented to a client which
on finding, shown that no management fees, repair and other costs were being
made. In addition to this, Lily is asking for workers compensation against the
agency and there are many other occasions which have contributed to high
financial risks.
 Social and political risks: The continuation of recession period is a huge risk
which will force this agency to earn low profits. In the context of social risk, it has
already damaged its public image which is valuable for every organization.
 Client risk: The number of incidents of legal consequences, and non-response of
complaints, it has lost majority of customers including the important ones.
Question 2:
Operational risk: Identification of factors responsible and accountability of each
individual involved with the events together with quantifiable data.
Financial risk: Cross examination of all accounts, journals and financial statement.
Social and political risk: Evaluation of impact of conditions prevailing in the society.
Client risk: Resolving client's queries with prompt action.
Question 3:
The risks must be informed to all the employees working in the organization so that their
negative impact on business can be reduced. It can be communicated directly or through a
meeting in which a presentation will be given describing the real situation of the company.

SUMMATIVE ASSESSMENT 2
Project 1
Covered in Pamphlet.
Project 2

© State of Queensland, 2013.
The Queensland Government supports and encourages the dissemination and exchange of its information. The copyright in this
publication is licensed under a Creative Commons Attribution 3.0 Australia (CC BY) licence.
Under this licence you are free, without having to seek our permission, to use this publication in accordance with the licence terms.
You must keep intact the copyright notice and attribute the State of Queensland as the source of the publication.
Note: Some content in this publication may have different licence terms as indicated.
Business Continuity Plan Template

Contents
Introduction......................................................................................................................................1
Developing a Business Continuity Plan.................................................................................1
Business Continuity Plan.................................................................................................................1
Distribution List.................................................................................................................1
References and related documents.....................................................................................1
Section 1...........................................................................................................................................1
Executive Summary (optional)..........................................................................................1
Objectives..........................................................................................................................1
Glossary.............................................................................................................................1
Section 2...........................................................................................................................................1
Risk Management Planning....................................................................................................1
Insurance............................................................................................................................1
Data security and backup strategy.....................................................................................1
Section 3...........................................................................................................................................1
Business Impact Analysis.......................................................................................................1
Business Impact Analysis..................................................................................................1
Section 4...........................................................................................................................................1
Incident Response Plan...........................................................................................................1
Immediate Response Checklist..........................................................................................1
Evacuation Procedures.......................................................................................................1
Emergency kit....................................................................................................................1
Roles and Responsibilities.................................................................................................1
Key Contact Sheet.............................................................................................................1
Event Log..........................................................................................................................1
Section 5...........................................................................................................................................1
Recovery.................................................................................................................................1
Recovery Plan....................................................................................................................1

Incident Recovery Checklist..............................................................................................1
Recovery contacts..............................................................................................................1
Insurance claims................................................................................................................1
Market assessment.............................................................................................................1
Section 6...........................................................................................................................................1
Rehearse, Maintain and Review.............................................................................................1
Training schedule...............................................................................................................1
Review schedule................................................................................................................1
2

Introduction
The purpose of developing a Business Continuity Plan is to ensure the
continuation of your business during and following any critical incident that
results in disruption to your normal operational capability.
This guide will assist you to undertake a Risk Management Plan and Business
Impact Analysis, and create Incident Response and Recovery Plans for your
business.
Developing a Business Continuity Plan
This template incorporates the Prevention, Preparedness, Response and
Recovery (PPRR) framework. Each of the four key elements is represented by
a part in the Business Continuity Planning Process.
 Prevention - Risk Management planning
- Incorporates the Prevention element that identifies and manages
the likelihood and/or effects of risk associated with an incident.
 Preparedness - Business Impact Analysis
- Incorporates the Preparedness element that identifies and
prioritises the key activities of a business that may be adversely
affected by any disruptions.
 Response – Incident Response planning
- Incorporates the Response element and outlines immediate
actions taken to respond to an incident in terms of containment,
control and minimising impacts.
 Recovery - Recovery planning
Page 3

- Incorporates the Recovery element that outlines actions taken to
recover from an incident in order to minimise disruption and
recovery times.
We have also included a section titled Rehearse, Maintain and Review, which
encourages you to test, regularly review and update your Business Continuity
Plan to ensure that your staff are familiar with it, and that it reflects your
changing business needs.
Business operators should use the following template as a guide to developing
a Business Continuity Plan. Customise it to suit your business needs. The blue
sample text is there to guide you and can be deleted after you have completed
the template. Remember to save your document.
Page 4

Page 5

Insert Your
Business Name
Business Continuity Plan
Page 6