NTISthis.com

Evidence Guide: BSBCON401A - Work effectively in a business continuity context

Student: __________________________________________________

Signature: _________________________________________________

Tips for gathering evidence to demonstrate your skills

The important thing to remember when gathering evidence is that the more evidence the better - that is, the more evidence you gather to demonstrate your skills, the more confident an assessor can be that you have learned the skills not just at one point in time, but are continuing to apply and develop those skills (as opposed to just learning for the test!). Furthermore, one piece of evidence that you collect will not usualy demonstrate all the required criteria for a unit of competency, whereas multiple overlapping pieces of evidence will usually do the trick!

From the Wiki University

 

BSBCON401A - Work effectively in a business continuity context

What evidence can you provide to prove your understanding of each of the following citeria?

Demonstrate an understanding of the business continuity management framework

  1. Access the business continuity management framework, and related policies and procedures
  2. Analyse the key elements of the business continuity management framework within the organisation to determine their impact
  3. Within work role authority, contribute to the review of the business continuity management framework, policies and procedures
  4. Participate in emergency response and business continuity management framework training and exercises as required
Access the business continuity management framework, and related policies and procedures

Completed
Date:

Teacher:
Evidence:

 

 

 

 

 

 

 

Analyse the key elements of the business continuity management framework within the organisation to determine their impact

Completed
Date:

Teacher:
Evidence:

 

 

 

 

 

 

 

Within work role authority, contribute to the review of the business continuity management framework, policies and procedures

Completed
Date:

Teacher:
Evidence:

 

 

 

 

 

 

 

Participate in emergency response and business continuity management framework training and exercises as required

Completed
Date:

Teacher:
Evidence:

 

 

 

 

 

 

 

Support the organisation's business continuity strategies

  1. Demonstrate an awareness of internal and external risk context relevant to the organisation
  2. Review and provide feedback on the outcomes of the business impact assessment/s
  3. Participate in risk treatment reviews
  4. Identify and record the organisation's emergency response, continuity and recovery strategies
  5. Identify own role and responsibility within the organisation's business continuity plan/s
  6. Identify and report to management on any new or emergingrisk or incident
Demonstrate an awareness of internal and external risk context relevant to the organisation

Completed
Date:

Teacher:
Evidence:

 

 

 

 

 

 

 

Review and provide feedback on the outcomes of the business impact assessment/s

Completed
Date:

Teacher:
Evidence:

 

 

 

 

 

 

 

Participate in risk treatment reviews

Completed
Date:

Teacher:
Evidence:

 

 

 

 

 

 

 

Identify and record the organisation's emergency response, continuity and recovery strategies

Completed
Date:

Teacher:
Evidence:

 

 

 

 

 

 

 

Identify own role and responsibility within the organisation's business continuity plan/s

Completed
Date:

Teacher:
Evidence:

 

 

 

 

 

 

 

Identify and report to management on any new or emergingrisk or incident

Completed
Date:

Teacher:
Evidence:

 

 

 

 

 

 

 

Assessed

Teacher: ___________________________________ Date: _________

Signature: ________________________________________________

Comments:

 

 

 

 

 

 

 

 

Instructions to Assessors

Evidence Guide

The Evidence Guide provides advice on assessment and must be read in conjunction with the performance criteria, required skills and knowledge, range statement and the Assessment Guidelines for the Training Package.

Critical aspects for assessment and evidence required to demonstrate competency in this unit

Evidence of the following is essential:

demonstrated understanding of own role in relation to wider business continuity requirements in the organisation

demonstrated understanding of risk and the business continuity management framework processes and policies as they apply in the organisation

participation in contributing to improving business continuity management framework processes within the organisation

Context of and specific resources for assessment

Assessment must ensure:

access to workplace documentation relating to risk management

access to business continuity management framework, business impact assessments and strategies

Method of assessment

A range of assessment methods should be used to assess practical skills and knowledge. The following examples are appropriate for this unit:

direct questioning combined with review of portfolios of evidence and third party workplace reports of on-the-job performance by the participant

review of documentation outlining risk context and organisation's processes and outcomes

work based projects or case studies

scenarios

oral or written questioning to assess basic knowledge of Australian standards for risk management and business continuity

Guidance information for assessment

Holistic assessment with other units relevant to the industry sector, workplace and job role is recommended.

Required Skills and Knowledge

Required skills

communication and teamwork skills to:

provide feedback to appropriate personnel about the business continuity management framework and strategies

read, write and understand a variety of workplace documents

work effectively with diverse individuals and groups

learning skills to participate in training activities and to improve own knowledge and skills about business continuity management

planning and organising skills to identify risk factors and to take action to minimise risk according to level of responsibility

problem-solving skills to appropriately address identified risks treatments (within ownlevel of responsibility)

research and data collection skills to monitor and evaluate risks

technology skills to use the organisation's data and information management systems

Required knowledge

Australian/New Zealand Standard AS/NZS 4360:2004Risk Management

Australian/New ZealandStandard HandbookAS/NZS HB221:2004 Business Continuity Management

organisation's policies and procedures, including business continuity strategies

overall operations of the organisation, including existing data and information systems

relevant legislation and regulations that impact on business continuity, such as OHS, environment, duty of care, contract, company, freedom of information, industrial relations, privacy and confidentiality, due diligence, records management

Range Statement

The range statement relates to the unit of competency as a whole. It allows for different work environments and situations that may affect performance. Bold italicised wording, if used in the performance criteria, is detailed below. Essential operating conditions that may be present with training and assessment (depending on the work situation, needs of the candidate, accessibility of the item, and local industry and regional contexts) may also be included.

Organisation may include:

commercial enterprises

community

government

non-commercial enterprises

not-for-profit

religious organisations

Exercises may include:

drills

scenario planning

Risk may include:

aeronautical

armed hold-up

biological

chemical

civil disturbance

disability/death of key person

economic

electronic

erosion

explosion

fire

fraud

hazardous materials

industrial accident

infrastructure failure

market failure

natural disaster

operational collapse - insolvency

pandemic

pollution

privacy and confidentiality

radiological/nuclear

robbery and/or major vandalism

sabotage

structure failure

terrorism

transport accident

war

water

weather/climate change

Business impact assessment/s may include:

breach/reduction of customer service standards

cost/impact on existing and/or increased finance

escalating losses over time

impact of loss of business/resources

loss of revenue

potential fines/penalties/litigation costs

reputation/brand damage

statutory/regulatory breaches

Risk treatment may include:

activating evacuation plan

activating lock down procedures

activating workplace emergency management plan

personnel working from home

relocation of facilities

resource replacement

temporarily suspending activities

transferring activities

Emergency response strategies may include:

contact lists to report incident/s

documentation/reporting/recording procedures

evacuation plan

location of evacuation assembly point

lockdown procedures

names and responsibilities of wardens

personnel instructions for evacuation

process for accounting for personnel

workplace emergency management plan

Continuity strategies may include:

action required to resume critical business activities

contact lists of critical personnel and stakeholders

counselling

critical business activities and prioritisation of when they can/need to resume

list of resources

relocation to alternative worksite

resource replacement

treatment for critical business activities

Recovery strategies may include:

damage assessment

process for assessing loss and filing insurance claims

relocation of business to original location

salvage and restoration of records, infrastructure and premises

Business continuity plan/s may include:

introduction

organisational details

objectives

purpose

critical business functions

assumptions

processes

activation and stand down

responsibility

version control and maintenance

operational requirements

critical success factors

interdependencies

outage times

compliance

people

structure

roles and responsibilities

contact details

continuity arrangements

accommodation

resources

workarounds and alternative solutions

continuity management tasks

communications

other plans

Emerging risk may include:

act of god

civil unrest

communication with third party, e.g. phone call of bomb threat

environmental - human

insufficient finance

insufficient insurance

news bulletins

pandemic

terrorist

Incident may include:

biological contamination

chemical exposure

detection of any of the risks as listed previously

fire

flood