Business Continuity Management & IT Disaster Recovery

Business Continuity Management And IT Disaster Recovery How Prepared Is Your Organisation When The Unthinkable Happens?

27 – 30 October 2013 • Fairmont Hotel, Dubai, UAE Receive FREE Affiliate Membership To The Business Continuity Institute For One Year!

6 Key Learning Objectives 1. Make structured progress through all stages of the Business Continuity Management lifecycle with realistic scenario-based group exercises 2. Understand advanced methods to assess and reduce risk and impact on the business 3. Learn how to write, review and test an effective business continuity plan 4. Develop a hands-on approach to a more cost effective protection and recovery of your IT organisation and its infrastructure 5. Help your business survive by effectively planning and reducing the key risks to IT and explore the latest recovery technologies and techniques 6. Develop the business case for IT recovery and write action oriented disaster recovery plans Take away your complimentary BCM Framework™ CD – the best selling library of examples and tools for BCM! worth USD 375

www.iirme.com/businesscontinuity Organised by:

Strategic Career Partner:

Follow us on: www.twitter.com/iirmiddleeast www.facebook.com/iirmiddleeast www.youtube.com/iirmiddleeast

About Your Expert Course Leader

The George Washington University School of Business, IIR Middle East’s Academic Partner, is dedicated to excellence: in its teaching and research about management, in the public and private sectors, within the United States and internationally.

The school has a 75 year history of preparing men and women for leadership in both the public and private sectors. Known internationally for its dedication to academic excellence, the school draws students from all parts of the United States and around the world.

Beyond first class teaching and scholarship, the school’s faculty offers practical experience in the issues and challenges confronting business and government. Its research centres link faculty and students with US and international business and government organisations. Recent distance learning initiatives have expanded the school’s global reach.

Course Requirements And Certificates Delegates must meet two criteria to be eligible for an IIRME/GW Certificate of Completion for a course: 1. Satisfactory attendance – delegates must attend all sessions of the course. Delegates who miss more than 2 hours of the course sessions will not be eligible to sit the course exam 2. Successful completion of the course assessment Delegates who do not meet these criteria will receive an IIRME Certificate of Attendance. If delegates have not attended all sessions, the Certificate will clearly state the number of hours attended.

Course Assessment Knowledge confirmation and personal assessment to include: • Group Discussions • Quiz • Final exam through a multiple choice paper

Who Should Attend?

This highly beneficial course is developed for professionals responsible for business continuity and disaster recovery.

Specialists responsible for ensuring the continuity of critical IT and telecommunications systems and/or processes will certainly benefit. It is suitable for those working in the areas of IT, IT infrastructure, IT security and information systems. It is also suitable for those professionals working in the business areas of operations, audit and technical support.

Would you like to run this course in-house?

The in-house training division of IIR Middle East Tel: +971 4 407 2624 • Email: CTS@iirme.com www.iirme.com/cts

T: +971 4 335 2437

F: +971 4 335 2438

Andrew Hiles was founder and, for some sixteen years, Chairman of the first international user group for business continuity and disaster recovery planning; founding Director and first Fellow of the Business Continuity Institute; and a founder of the World Food Safety Organisation. He has been on the advisory boards of Contingency Planning and Management magazine (USA); Continuity Central; and Continuity Forum. He runs the LinkedIn forum for BC Research.

Andrew is a Director of Kingswell International, consultants who specialise in managing businesss risk and delivering excellence in service. As a global consultant, he has helped hi-tech, financial, transport, manufacturing retail and government organizations to manage risk and implement crisis, continuity and contingency plans. Clients include major blue chip companies, public bodies and smaller, dynamic organizations in both the private and public sectors around the world.

His books on crisis, continuity and risk management, used by universities around the world, include: Business Continuity Management – Best Global Practices 3rd edition and Enterprise Risk Assessment and Business Impact Analysis – Best Global Practices, both published by Rothstein Inc in the USA. The Definitive Handbook of Business Continuity Management 3rd edition (editor and main contributor), published by Wiley; Reputation Management – Building and Protecting Your Company’s Profile in a Digital World, (editor and contributor), published by Bloomsbury. He contributed on Business Continuity Management to Contingency Planning and Crisis Management: Assessing and Mitigating Potential Threats to your Business, (Bloomsbury); Qatar Finance: The Ultimate Resource (QFINANCE), and Croner’s Business Risk Briefing and numerous other books.

Course Introduction Business processes are increasingly linked together and a disaster (power outage, fire, pandemic, computer virus attack) could cripple your organisation, suspend operational business processes and disrupt systems. Not to mention the financial loss and damage to your reputation as a reliable provider or business partner.

Business continuity management and IT disaster recovery are of major concern to all industry sectors and are now recognised as an integral part of good management practice. Moreover, it is increasingly required by compliance regulations and organisations that want to do business with you.

By participating you will have the knowledge to: • Identify risks – evaluate their effect and justify and implement risk mitigation strategies • Help your organisation survive a business disruption or disaster • Create an effective business continuity organisation • Better align your IT disaster recovery solutions to your business continuity plan • Audit, test and maintain IT and telecommunications recovery plans Plus! Free One-Year Affiiliate Membership to the Business Continuity Institute The Business Continuity Institute (www.thebci.org) was formed in 1994 to promote the art and science of business continuity management world-wide. With nearly 4000 members in 80 countries, the BCI is a leading voice in Business Continuity – it was behind the BC Standard, BSI 25999. Membership of the BCI is a rigorous process designed to ensure high levels of professionalism.

With this important course, you get your foot on the first rung of this membership ladder. Upon completion of the course, you will get FREE BCI membership for one year.

E: register@iirme.com

W: www.iirme.com/businesscontinuity

Business Continuity Management And IT Disaster Recovery 27 – 30 October 2013 • Fairmont Hotel, Dubai, UAE Course Timings: Registration will be at 07.30 on Day One. Each day will start at 08.00 and close at 14.30. There will be two short breaks for refreshments and lunch will be served at the end of each day’s session.

Day One

Day Three

Introduction And Objectives • Identifying your issues • Introducing delegates and identifying delegate issues • Defining workshop objectives • Introducing ISO 22301, ISO 25999 and the BCI/DRII standards and guidelines • NFPA 1600 BCM

Business Continuity Roles And Responsibilities • The business continuity manager – role and tasks • Departmental business continuity managers – role and tasks • Support functions – new roles and tasks

Project Initiation And Management • Definition of terms • The six key elements of business continuity • Communicating the need • Raising and maintaining awareness • Identifying training needs and developing training programmes • How to establish a BC policy, project scope and terms of reference • The project – understanding and implementing essential project stages • Links with other projects, contracts and service level agreements • Project reporting – how to keep on track Risk Evaluation And Control • Risk management – the key to security • Risk management options – avoidance, reduction, containment or transfer • Risk analysis – methodologies for assessing risk • Critical component failure analysis • Top tips to achieve an effective result

Case Study: Risk Assessment Business Impact Analysis • Business alignment • Assessing the real costs of downtime • Critical service catalogue • Business impact analysis – the costs of disaster • Recovery Time Objective (RTO) – the time window for recovery • Maximum Tolerable Period of Disruption (MTPD) • Recovery Point Objective (RPO) – is any transaction loss acceptable?

• Appetite for risk • Gap analysis Vital Material Protection • What are vital materials?

• Requirements analysis • What is needed for recovery?

Developing And Implementing The Business Continuity Plan • Business management issues and organisation • Planning assumptions and prerequisites • Writing the dynamic business continuity plan • Action plans

Exercise: Writing A Business Continuity Plan Auditing, Testing And Maintaining Business Continuity Plans • Planning the audit • How to develop effective BCP exercises • Maintaining the plan

Exercise: Planning A Business Continuity Test

Day Four The Purpose Of IT Disaster Recovery (DR) Planning • Why plan for disaster?

• ISO 22301; ISO 27031-2011 BC Program Elements; ISO / IEC 27001-2005 IT Security Techniques; I ISO/IEC 24762:2008, Information technology – Security techniques – Guidelines for information and communications technology disaster recovery services; TIL and CobIT • How IT DR fits into BC project and other plans (CM, Emergency, BC) • Scoping the project – what is IT responsible for and what is critical?

Exercise: Assessing What Matters Open Forum: Discuss Delegate Specific Issues Case Study: Example Of Survival By Design Effective Data Protection Options • Storage options • Data protection techniques • Explore the latest proven technologies of data de-duplication, replication, continuous data protection, content addressed storage and their benefits

Exercise: Business Impact Analysis

Day Two Developing Continuity Strategies • Strategy options for business operations and support services • Pros and cons Public Relations And Crisis Communication – Key To Survival • Managing the media • Internal and external communication • What to say and what not to say • When to say it • Recognising the crisis curve Why Insurance Won’t Save You! • Insurance pitfalls • What insurance can and cannot do

Exercise: Business Continuity Strategy Emergency Response And Operations • Immediate response • Co-ordination with public authorities Business Continuity During Corporate Restructuring

T: +971 4 335 2437

Exercise: Creating A Business Continuity Organisation

F: +971 4 335 2438

Recovery Concepts/Options • Thin client • Virtualisation and IT DR • Third party virtual recovery platforms • How to achieve high availability • Cloud Computing – pros and cons • Continuous availability – is it possible?

Writing Your IT Disaster Recovery Plan • Structure • Scope • Content • Plan maintenance Testing Your IT Disaster Recovery Plan • How to test • What to test • How not to test

Exercise: Group IT Disaster Recovery Rehearsal Action Plans • Delegate action plans • What next?

E: register@iirme.com

W: www.iirme.com/businesscontinuity

Business Continuity Management And IT Disaster Recovery 27 – 30 October 2013 • Fairmont Hotel, Dubai, UAE FIVE WAYS TO REGISTER IIR Holdings Ltd. P.O Box 9428 Dubai, UAE

+971 4 335 2437 +971 4 335 2438 register@iirme.com

www.iirme.com/businesscontinuity

DISCOUNTS AVAILABLE FOR 2 OR MORE PEOPLE CALL – +971 4 335 2483 E-MAIL – a.watts@iirme.com WEB BC4819 Event

Course Fee Before 11 August 2013

Course Fee Before 1 September 2013

Final Fee

US$ 3,895

US$ 4,395

US$ 4,695

Business Continuity Management And IT Disaster Recovery 27 – 30 October 2013

WOULD YOU LIKE TO RUN THIS COURSE INͳHOUSE?

Course fees include documentation, luncheon and refreshments. Delegates who attend all sessions and successfully complete the course assessment will receive an IIRME/GW Certificate of Completion.

Job Title: ......................................................................................................... Email: .....................................................................................

Tel: .....................................................

DELEGATE DETAILS

All registrations are subject to our terms and conditions which are available at www.iirme.com/terms. Please read them as they include important information. By submitting your registration you agree to be bound by the terms and conditions in full.

Fax: .................................................... Mobile: ..................................................................................

Name: ..............................................................................................................................................................................................................

Job Title: ......................................................................................................... Email: .....................................................................................

Tel: ..................................................... Fax: .................................................... Mobile: ..................................................................................

Name: ..............................................................................................................................................................................................................

Job Title: ......................................................................................................... Email: .....................................................................................

Tel: ..................................................... Fax: .................................................... Mobile: ..................................................................................

Name: ..............................................................................................................................................................................................................

Payments A confirmation letter and invoice will be sent upon receipt of your registration. Please note that full payment must be received prior to the event. Only those delegates whose fees have been paid in full will be admitted to the event. You can pay by company cheques or bankers draft in Dirhams or US$. Please note that all US$ cheques and drafts should be drawn on a New York bank and an extra amount of US$ 6 per payment should be added to cover bank clearing charges. In any event payment must be received not later than 48 hours before the Event. Entry to the Event may be refused if payment in full is not received.

Credit card payment If you would like to pay by credit card, please tick here and a member of our team will contact you to take the details

Cancellation

Job Title: ......................................................................................................... Email: .....................................................................................

Tel: ..................................................... Fax: .................................................... Mobile: ..................................................................................

COMPANY DETAILS Company: ............................................................................................................................................................................................................

Address: ................................................................................................................................................................................................................

Postcode: ................................................................................. Country: ...........................................................................................................

Tel: .............................................................................................. Fax: ..................................................................................................................

No. of employees on your site: 1000+ 500-999 250-499

50-249

0-49

Nature of your company's business: ..........................................

YES, I would like to receive information about future events & services via e-mail .................................................................

To assist us with future correspondence, please supply the following details: Name of the Department Head: .....................................................................................................................................................................

Department: ........................................................... Mobile: .......................................... Email: .......................................................................

Training Manager: .............................................................................................................................................................................................

Department: ........................................................... Mobile: .......................................... Email: ......................................................................

Booking Contact: ..............................................................................................................................................................................................

Department: ........................................................... Mobile: .......................................... Email: ......................................................................

If you are unable to attend, a substitute delegate will be welcome in your place. Registrations cancelled more than 7 days before the Event are subject to a $200 administration charge.

Registration fees for registrations cancelled 7 days or less before the Event must be paid in full. Substitutions are welcome at any time.

Avoid Visa Delays - Book Now Delegates requiring visas should contact the hotel they wish to stay at directly, as soon as possible.

Visas for non-GCC nationals may take several weeks to process.

All registrations are subject to acceptance by IIR which will be confirmed to you in writing.

Due to unforeseen circumstances, the programme may change and IIR reserves the right to alter the venue and/or speakers.

Event Venue: Fairmont Hotel, Dubai, UAE Tel: +971 4 332 5555 Accommodation Details We highly recommend you secure your room reservation at the earliest to avoid last minute inconvenience. You can contact the IIR Hospitality Desk for assistance on: Tel: +971 4 407 2693 Fax: +971 4 407 2517 Email: hospitality@iirme.com © Copyright I.I.R. HOLDINGS B.V.

SS/EO CP0503 IT

LR

Name: ..............................................................................................................................................................................................................