Step

Prepare/Review/Update Office/Unit/HQ NY Risk assessment

Responsible Party

BCP focal point

Template/Guideline

Explanatory Notes

- This includes Country Security Risk Assessment (SRM) prepared and approved by UN Security Management System in country.
- Risk Assessment should be annexed to the BCP.

Step

Prepare/Review/Update Office/Unit/HQ NY Business Impact Analysis (BIA)

Responsible Party

BCP focal point

Template/Guideline

Explanatory Notes

- Identify critical business functions and assess the impact from identified risks along with Recovery Time Objectives (RTO) of critical functions along with necessary ICT tools/equipment to continue these functions;
- Identify essential office/unit/bureau documents; keep hard and soft copies in off-site location/OneDrive;
- This is a collective exercise that is done in consultation with senior management;
- Assessment should be annexed to BCP.

Step

Prepare/review/update Office/Unit/Bureau BCP document

Responsible Party

BCP focal point

Template/Guideline

Explanatory Notes

- Based on the Risk Assessment and BIA, review/update existing BCP to ensure inclusion of most recent critical function and critical staffing list with alternates and their contact details;
- Pre-identify off-site location to ensure that in the event of an emergency, Office/Unit/Bureau can operate from the alternative site. Necessary power and ICT connectivity is essential including when/if working from home or from another agency office;
- ICT Disaster Recovery Plan is to be prepared.

Step

Share draft BCP with all supporting documents with BMS Directorate

Responsible Party

BCP focal point

Template/Guideline

Explanatory Notes

Via email

Step

BMS Directorate review and provide Office/Unit/Bureau any comments

Responsible Party

Template/Guideline

Explanatory Notes

 Via email

Step

 Approve/sign off BCP documents

Responsible Party

Head of Office/Unit/Bureau

Template/Guideline

Explanatory Notes

 - All supporting documents are to be annexed to the BCP.

Step

Arrange for BCP Test

Responsible Party

Head of Office/Unit/Bureau

Template/Guideline

Explanatory Notes

- BCP simulation exercise should test the viability of the identified critical functions and procedures in the way that they would be performed in a real crisis/critical incident;
- The test can be conducted to include Office/Unit/Bureau Crisis Management Plan, Business Continuity Plan, and/or ICT Disaster Recovery Plans (i.e. one or several components of the plan); 
- Lessons learnt should be drawn from the exercise and the BCP should be modified as necessary.

Step

Upload signed BCP and BCP test report

Responsible Party

BCP focal point

Template/Guideline

Explanatory Notes