BSBCON601 - Develop and maintain business continuity plans
Assessor Resource
BSBCON601 Develop and maintain business continuity plans
Assessment tool
Version 1.0 Issue Date: April 2024
This unit describes the skills and knowledge required to work within the business continuity framework to develop and implement business continuity plans for an organisation to manage risk and ensure business resilience when faced with a disruptive event.
It applies to individuals working in positions of authority who are approved to implement change across the division, business area, program area or project area.
This unit addresses the knowledge and processes necessary to develop and maintain business continuity requirements. Business continuity awareness and planning help the organisation to identify barriers and/or interruptions and determine how the organisation will achieve critical business objectives (even at diminished capacity) until full functionality is restored.
The focus is on risk and vulnerability assessment, business impact assessments, and business continuity and communication plans.
No licensing, legislative or certification requirements apply to this unit at the time of publication.
You may want to include more information here about the target group and the purpose of the assessments (eg formative, summative, recognition)
Evidence Required
List the assessment methods to be used and the context and resources required for assessment. Copy and paste the relevant sections from the evidence guide below and then re-write these in plain English.
ELEMENT
PERFORMANCE CRITERIA
Elements describe the essential outcomes.
Performance criteria describe the performance needed to demonstrate achievement of the element.
1 Conduct risk and vulnerability assessments
1.1 Identify the relationship between corporate risk and organisation’s business continuity management framework
1.2 Analyse and determine internal and external risk context by collecting information relating to the organisation’s priorities, operations and environment
1.3 Analyse and identify potential internal and external sources of disruption to the organisation’s priorities, operations and environment
2 Develop and report business impact assessment/s
2.1 Identify the organisation’s critical business functions and its dependencies and interdependencies, and analyse and evaluate risks through business impact assessment/s
2.2 Develop risk and disruption scenarios through business impact assessment/s
2.3 Validate risk and disruption scenarios through business impact assessment/s
2.4 Analyse, validate and report on the outcomes of business impact assessment/s to management
3 Develop, implement and report risk treatments
3.1 Develop and implement risk treatments
3.2 Participate in risk treatment review
3.3 Report risk treatment review to management and relevant personnel
3.4 Update risk treatment review in line with feedback provided by relevant personnel
4 Determine interdependencies and develop response strategies
4.1 Develop the organisation’s emergency response, continuity and recovery strategies
4.2 Consult and seek endorsement on organisation’s emergency response, continuity and recovery strategies from management and other appropriate personnel
4.3 Identify and manage synergies and conflicts in resource availability and access in conjunction with management
4.4 Coordinate the organisation’s emergency response, continuity and recovery strategies
5 Establish business continuity plan
5.1 Consult relevant personnel and seek support for the development of the organisation’s business continuity plan/s
5.2 Ensure content of business continuity plan is comprehensive and meets, where applicable, requirements of regulations, standards, industry practice and geographical dispersion
5.3 Document and analyse feedback received through consultation and finalise business continuity plan
5.4 Demonstrate accountability for organisation’s business continuity plan/s
6 Establish communication plan within organisation’s planning framework
6.1 Identify stakeholders and determine objective and scope of communication plan for periods before, during and after disruptions occur
6.2 Determine organisation’s communication capabilities in line with objectives and scope, and identify gaps and options for meeting shortfalls
6.3 Develop and implement across the organisation, appropriate risk and incident monitoring, reporting and escalation processes
7 Deliver business continuity professional development activities
7.1 Promote application of business continuity management framework and plan to all relevant personnel on an ongoing basis
7.2 Provide staff with appropriate information on cyclical review process of the business continuity management plan
7.3 Conduct business continuity management plan exercises in line with organisation’s policies and procedures
7.4 Conduct post-exercise debriefs, complete post-exercise reviews and update business continuity strategies and plans as required
7.5 Manage and record staff learning and development on the business continuity management framework in accordance with organisational requirements, and framework policies and procedures
7.6 Report on the outcomes of staff learning and development, and business continuity framework exercises to relevant personnel
Submission Requirements
List each assessment task's title, type (eg project, observation/demonstration, essay, assingnment, checklist) and due date here
Assessment task 1: [title] Due date:
(add new lines for each of the assessment tasks)
Assessment Tasks
Copy and paste from the following data to produce each assessment task. Write these in plain English and spell out how, when and where the task is to be carried out, under what conditions, and what resources are needed. Include guidelines about how well the candidate has to perform a task for it to be judged satisfactory.
ELEMENT
PERFORMANCE CRITERIA
Elements describe the essential outcomes.
Performance criteria describe the performance needed to demonstrate achievement of the element.
1 Conduct risk and vulnerability assessments
1.1 Identify the relationship between corporate risk and organisation’s business continuity management framework
1.2 Analyse and determine internal and external risk context by collecting information relating to the organisation’s priorities, operations and environment
1.3 Analyse and identify potential internal and external sources of disruption to the organisation’s priorities, operations and environment
2 Develop and report business impact assessment/s
2.1 Identify the organisation’s critical business functions and its dependencies and interdependencies, and analyse and evaluate risks through business impact assessment/s
2.2 Develop risk and disruption scenarios through business impact assessment/s
2.3 Validate risk and disruption scenarios through business impact assessment/s
2.4 Analyse, validate and report on the outcomes of business impact assessment/s to management
3 Develop, implement and report risk treatments
3.1 Develop and implement risk treatments
3.2 Participate in risk treatment review
3.3 Report risk treatment review to management and relevant personnel
3.4 Update risk treatment review in line with feedback provided by relevant personnel
4 Determine interdependencies and develop response strategies
4.1 Develop the organisation’s emergency response, continuity and recovery strategies
4.2 Consult and seek endorsement on organisation’s emergency response, continuity and recovery strategies from management and other appropriate personnel
4.3 Identify and manage synergies and conflicts in resource availability and access in conjunction with management
4.4 Coordinate the organisation’s emergency response, continuity and recovery strategies
5 Establish business continuity plan
5.1 Consult relevant personnel and seek support for the development of the organisation’s business continuity plan/s
5.2 Ensure content of business continuity plan is comprehensive and meets, where applicable, requirements of regulations, standards, industry practice and geographical dispersion
5.3 Document and analyse feedback received through consultation and finalise business continuity plan
5.4 Demonstrate accountability for organisation’s business continuity plan/s
6 Establish communication plan within organisation’s planning framework
6.1 Identify stakeholders and determine objective and scope of communication plan for periods before, during and after disruptions occur
6.2 Determine organisation’s communication capabilities in line with objectives and scope, and identify gaps and options for meeting shortfalls
6.3 Develop and implement across the organisation, appropriate risk and incident monitoring, reporting and escalation processes
7 Deliver business continuity professional development activities
7.1 Promote application of business continuity management framework and plan to all relevant personnel on an ongoing basis
7.2 Provide staff with appropriate information on cyclical review process of the business continuity management plan
7.3 Conduct business continuity management plan exercises in line with organisation’s policies and procedures
7.4 Conduct post-exercise debriefs, complete post-exercise reviews and update business continuity strategies and plans as required
7.5 Manage and record staff learning and development on the business continuity management framework in accordance with organisational requirements, and framework policies and procedures
7.6 Report on the outcomes of staff learning and development, and business continuity framework exercises to relevant personnel
Copy and paste from the following performance criteria to create an observation checklist for each task. When you have finished writing your assessment tool every one of these must have been addressed, preferably several times in a variety of contexts. To ensure this occurs download the assessment matrix for the unit; enter each assessment task as a column header and place check marks against each performance criteria that task addresses.
Observation Checklist
Tasks to be observed according to workplace/college/TAFE policy and procedures, relevant legislation and Codes of Practice
Yes
No
Comments/feedback
Identify the relationship between corporate risk and organisation’s business continuity management framework
Analyse and determine internal and external risk context by collecting information relating to the organisation’s priorities, operations and environment
Analyse and identify potential internal and external sources of disruption to the organisation’s priorities, operations and environment
Identify the organisation’s critical business functions and its dependencies and interdependencies, and analyse and evaluate risks through business impact assessment/s
Develop risk and disruption scenarios through business impact assessment/s
Validate risk and disruption scenarios through business impact assessment/s
Analyse, validate and report on the outcomes of business impact assessment/s to management
Develop and implement risk treatments
Participate in risk treatment review
Report risk treatment review to management and relevant personnel
Update risk treatment review in line with feedback provided by relevant personnel
Develop the organisation’s emergency response, continuity and recovery strategies
Consult and seek endorsement on organisation’s emergency response, continuity and recovery strategies from management and other appropriate personnel
Identify and manage synergies and conflicts in resource availability and access in conjunction with management
Coordinate the organisation’s emergency response, continuity and recovery strategies
Consult relevant personnel and seek support for the development of the organisation’s business continuity plan/s
Ensure content of business continuity plan is comprehensive and meets, where applicable, requirements of regulations, standards, industry practice and geographical dispersion
Document and analyse feedback received through consultation and finalise business continuity plan
Demonstrate accountability for organisation’s business continuity plan/s
Identify stakeholders and determine objective and scope of communication plan for periods before, during and after disruptions occur
Determine organisation’s communication capabilities in line with objectives and scope, and identify gaps and options for meeting shortfalls
Develop and implement across the organisation, appropriate risk and incident monitoring, reporting and escalation processes
Promote application of business continuity management framework and plan to all relevant personnel on an ongoing basis
Provide staff with appropriate information on cyclical review process of the business continuity management plan
Conduct business continuity management plan exercises in line with organisation’s policies and procedures
Conduct post-exercise debriefs, complete post-exercise reviews and update business continuity strategies and plans as required
Manage and record staff learning and development on the business continuity management framework in accordance with organisational requirements, and framework policies and procedures
Report on the outcomes of staff learning and development, and business continuity framework exercises to relevant personnel
Identify stakeholders and determine objective and scope of communication plan for periods before, during and after disruptions occur
Determine organisation’s communication capabilities in line with objectives and scope, and identify gaps and options for meeting shortfalls
Develop and implement across the organisation, appropriate risk and incident monitoring, reporting and escalation processes
Forms
Assessment Cover Sheet
BSBCON601 - Develop and maintain business continuity plans
Assessment task 1: [title]
Student name:
Student ID:
I declare that the assessment tasks submitted for this unit are my own work.
Student signature:
Result: Competent Not yet competent
Feedback to student
Assessor name:
Signature:
Date:
Assessment Record Sheet
BSBCON601 - Develop and maintain business continuity plans
Student name:
Student ID:
Assessment task 1: [title] Result: Competent Not yet competent
(add lines for each task)
Feedback to student:
Overall assessment result: Competent Not yet competent