Guidelines that contain detailed steps regarding the organization, responsibilities and procedures for preventing and recovering a payment system in the event of a disruption caused by internal or external factors.
Steps for Implementing Business Continuity Planning (BCP)
- Making Plans and Scope
At this stage, it will be planned all the elements needed when a disaster occurs, such as the person in charge when a disaster occurs, the budget funds when a disaster occurs, until the critical areas that need to be protected and keep running. Critical areas included in this stage such as:
- WAN network, LAN and computer server requirements.
- Data and telecommunications communication needs.
- Emergency work room after disaster.
- Application, software and data (backup) requirements.
- Media and records for storing important data.
- Human resources as post-disaster officers during the production process.
- Business Impact Assessment(BIA)
BIA is used to help business units understand the impact of disasters. Impacts from disasters are classified into 2 types, namely impacts that are quantitative (related to money ) and impacts that are qualitative (related to operations). Then the two impacts are analyzed, and a kind of guidance is made. This stage involves conducting a risk analysis and determining the impact on the company if the potential losses identified by the risk analysis actually occur.
- Development of Business Continuity Plan
The BCP development process includes an implementation plan, a test plan, and maintenance of the plans that are carried out. This stage also determines alternative operating strategies for business recovery within the specified recovery period. Business recovery actions are usually carried out by appointing a responsible team.
- Approval of the Plan and Implementation
In this stage, testing is carried out on the BCP, on how the system is composed and evaluating and also repairing the system in it. Furthermore, BCP training and socialization is conducted for all employees and then evaluates the results of the training. The final step is that final approval from senior management is needed
