NTISthis.com

Evidence Guide: BSBCON601 - Develop and maintain business continuity plans

Student: __________________________________________________

Signature: _________________________________________________

Tips for gathering evidence to demonstrate your skills

The important thing to remember when gathering evidence is that the more evidence the better - that is, the more evidence you gather to demonstrate your skills, the more confident an assessor can be that you have learned the skills not just at one point in time, but are continuing to apply and develop those skills (as opposed to just learning for the test!). Furthermore, one piece of evidence that you collect will not usualy demonstrate all the required criteria for a unit of competency, whereas multiple overlapping pieces of evidence will usually do the trick!

From the Wiki University

 

BSBCON601 - Develop and maintain business continuity plans

What evidence can you provide to prove your understanding of each of the following citeria?

Conduct risk and vulnerability assessments

  1. Identify the relationship between corporate risk and organisation’s business continuity management framework
  2. Analyse and determine internal and external risk context by collecting information relating to the organisation’s priorities, operations and environment
  3. Analyse and identify potential internal and external sources of disruption to the organisation’s priorities, operations and environment
Identify the relationship between corporate risk and organisation’s business continuity management framework

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Analyse and determine internal and external risk context by collecting information relating to the organisation’s priorities, operations and environment

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Analyse and identify potential internal and external sources of disruption to the organisation’s priorities, operations and environment

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Develop and report business impact assessment/s

  1. Identify the organisation’s critical business functions and its dependencies and interdependencies, and analyse and evaluate risks through business impact assessment/s
  2. Develop risk and disruption scenarios through business impact assessment/s
  3. Validate risk and disruption scenarios through business impact assessment/s
  4. Analyse, validate and report on the outcomes of business impact assessment/s to management
Identify the organisation’s critical business functions and its dependencies and interdependencies, and analyse and evaluate risks through business impact assessment/s

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Develop risk and disruption scenarios through business impact assessment/s

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Validate risk and disruption scenarios through business impact assessment/s

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Analyse, validate and report on the outcomes of business impact assessment/s to management

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Develop, implement and report risk treatments

  1. Develop and implement risk treatments
  2. Participate in risk treatment review
  3. Report risk treatment review to management and relevant personnel
  4. Update risk treatment review in line with feedback provided by relevant personnel
Develop and implement risk treatments

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Participate in risk treatment review

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Report risk treatment review to management and relevant personnel

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Update risk treatment review in line with feedback provided by relevant personnel

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Determine interdependencies and develop response strategies

  1. Develop the organisation’s emergency response, continuity and recovery strategies
  2. Consult and seek endorsement on organisation’s emergency response, continuity and recovery strategies from management and other appropriate personnel
  3. Identify and manage synergies and conflicts in resource availability and access in conjunction with management
  4. Coordinate the organisation’s emergency response, continuity and recovery strategies
Develop the organisation’s emergency response, continuity and recovery strategies

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Consult and seek endorsement on organisation’s emergency response, continuity and recovery strategies from management and other appropriate personnel

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Identify and manage synergies and conflicts in resource availability and access in conjunction with management

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Coordinate the organisation’s emergency response, continuity and recovery strategies

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Establish business continuity plan

  1. Consult relevant personnel and seek support for the development of the organisation’s business continuity plan/s
  2. Ensure content of business continuity plan is comprehensive and meets, where applicable, requirements of regulations, standards, industry practice and geographical dispersion
  3. Document and analyse feedback received through consultation and finalise business continuity plan
  4. Demonstrate accountability for organisation’s business continuity plan/s
Consult relevant personnel and seek support for the development of the organisation’s business continuity plan/s

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Ensure content of business continuity plan is comprehensive and meets, where applicable, requirements of regulations, standards, industry practice and geographical dispersion

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Document and analyse feedback received through consultation and finalise business continuity plan

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Demonstrate accountability for organisation’s business continuity plan/s

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Establish communication plan within organisation’s planning framework

  1. Identify stakeholders and determine objective and scope of communication plan for periods before, during and after disruptions occur
  2. Determine organisation’s communication capabilities in line with objectives and scope, and identify gaps and options for meeting shortfalls
  3. Develop and implement across the organisation, appropriate risk and incident monitoring, reporting and escalation processes
Identify stakeholders and determine objective and scope of communication plan for periods before, during and after disruptions occur

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Determine organisation’s communication capabilities in line with objectives and scope, and identify gaps and options for meeting shortfalls

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Develop and implement across the organisation, appropriate risk and incident monitoring, reporting and escalation processes

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Deliver business continuity professional development activities

  1. Promote application of business continuity management framework and plan to all relevant personnel on an ongoing basis
  2. Provide staff with appropriate information on cyclical review process of the business continuity management plan
  3. Conduct business continuity management plan exercises in line with organisation’s policies and procedures
  4. Conduct post-exercise debriefs, complete post-exercise reviews and update business continuity strategies and plans as required
  5. Manage and record staff learning and development on the business continuity management framework in accordance with organisational requirements, and framework policies and procedures
  6. Report on the outcomes of staff learning and development, and business continuity framework exercises to relevant personnel
Promote application of business continuity management framework and plan to all relevant personnel on an ongoing basis

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Provide staff with appropriate information on cyclical review process of the business continuity management plan

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Conduct business continuity management plan exercises in line with organisation’s policies and procedures

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Conduct post-exercise debriefs, complete post-exercise reviews and update business continuity strategies and plans as required

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Manage and record staff learning and development on the business continuity management framework in accordance with organisational requirements, and framework policies and procedures

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Report on the outcomes of staff learning and development, and business continuity framework exercises to relevant personnel

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Establish communication plan within organisation’s planning framework

  1. Identify stakeholders and determine objective and scope of communication plan for periods before, during and after disruptions occur
  2. Determine organisation’s communication capabilities in line with objectives and scope, and identify gaps and options for meeting shortfalls
  3. Develop and implement across the organisation, appropriate risk and incident monitoring, reporting and escalation processes
Identify stakeholders and determine objective and scope of communication plan for periods before, during and after disruptions occur

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Determine organisation’s communication capabilities in line with objectives and scope, and identify gaps and options for meeting shortfalls

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Develop and implement across the organisation, appropriate risk and incident monitoring, reporting and escalation processes

Completed
Date:

Teacher:		 Evidence:

 

 

 

 

 

 

 

Assessed

Teacher: ___________________________________ Date: _________

Signature: ________________________________________________

Comments:

 

 

 

 

 

 

 

 

Instructions to Assessors

Evidence Guide

ELEMENT

PERFORMANCE CRITERIA

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1 Conduct risk and vulnerability assessments

1.1 Identify the relationship between corporate risk and organisation’s business continuity management framework

1.2 Analyse and determine internal and external risk context by collecting information relating to the organisation’s priorities, operations and environment

1.3 Analyse and identify potential internal and external sources of disruption to the organisation’s priorities, operations and environment

2 Develop and report business impact assessment/s

2.1 Identify the organisation’s critical business functions and its dependencies and interdependencies, and analyse and evaluate risks through business impact assessment/s

2.2 Develop risk and disruption scenarios through business impact assessment/s

2.3 Validate risk and disruption scenarios through business impact assessment/s

2.4 Analyse, validate and report on the outcomes of business impact assessment/s to management

3 Develop, implement and report risk treatments

3.1 Develop and implement risk treatments

3.2 Participate in risk treatment review

3.3 Report risk treatment review to management and relevant personnel

3.4 Update risk treatment review in line with feedback provided by relevant personnel

4 Determine interdependencies and develop response strategies

4.1 Develop the organisation’s emergency response, continuity and recovery strategies

4.2 Consult and seek endorsement on organisation’s emergency response, continuity and recovery strategies from management and other appropriate personnel

4.3 Identify and manage synergies and conflicts in resource availability and access in conjunction with management

4.4 Coordinate the organisation’s emergency response, continuity and recovery strategies

5 Establish business continuity plan

5.1 Consult relevant personnel and seek support for the development of the organisation’s business continuity plan/s

5.2 Ensure content of business continuity plan is comprehensive and meets, where applicable, requirements of regulations, standards, industry practice and geographical dispersion

5.3 Document and analyse feedback received through consultation and finalise business continuity plan

5.4 Demonstrate accountability for organisation’s business continuity plan/s

6 Establish communication plan within organisation’s planning framework

6.1 Identify stakeholders and determine objective and scope of communication plan for periods before, during and after disruptions occur

6.2 Determine organisation’s communication capabilities in line with objectives and scope, and identify gaps and options for meeting shortfalls

6.3 Develop and implement across the organisation, appropriate risk and incident monitoring, reporting and escalation processes

7 Deliver business continuity professional development activities

7.1 Promote application of business continuity management framework and plan to all relevant personnel on an ongoing basis

7.2 Provide staff with appropriate information on cyclical review process of the business continuity management plan

7.3 Conduct business continuity management plan exercises in line with organisation’s policies and procedures

7.4 Conduct post-exercise debriefs, complete post-exercise reviews and update business continuity strategies and plans as required

7.5 Manage and record staff learning and development on the business continuity management framework in accordance with organisational requirements, and framework policies and procedures

7.6 Report on the outcomes of staff learning and development, and business continuity framework exercises to relevant personnel

Required Skills and Knowledge

ELEMENT

PERFORMANCE CRITERIA

Elements describe the essential outcomes.

Performance criteria describe the performance needed to demonstrate achievement of the element.

1 Conduct risk and vulnerability assessments

1.1 Identify the relationship between corporate risk and organisation’s business continuity management framework

1.2 Analyse and determine internal and external risk context by collecting information relating to the organisation’s priorities, operations and environment

1.3 Analyse and identify potential internal and external sources of disruption to the organisation’s priorities, operations and environment

2 Develop and report business impact assessment/s

2.1 Identify the organisation’s critical business functions and its dependencies and interdependencies, and analyse and evaluate risks through business impact assessment/s

2.2 Develop risk and disruption scenarios through business impact assessment/s

2.3 Validate risk and disruption scenarios through business impact assessment/s

2.4 Analyse, validate and report on the outcomes of business impact assessment/s to management

3 Develop, implement and report risk treatments

3.1 Develop and implement risk treatments

3.2 Participate in risk treatment review

3.3 Report risk treatment review to management and relevant personnel

3.4 Update risk treatment review in line with feedback provided by relevant personnel

4 Determine interdependencies and develop response strategies

4.1 Develop the organisation’s emergency response, continuity and recovery strategies

4.2 Consult and seek endorsement on organisation’s emergency response, continuity and recovery strategies from management and other appropriate personnel

4.3 Identify and manage synergies and conflicts in resource availability and access in conjunction with management

4.4 Coordinate the organisation’s emergency response, continuity and recovery strategies

5 Establish business continuity plan

5.1 Consult relevant personnel and seek support for the development of the organisation’s business continuity plan/s

5.2 Ensure content of business continuity plan is comprehensive and meets, where applicable, requirements of regulations, standards, industry practice and geographical dispersion

5.3 Document and analyse feedback received through consultation and finalise business continuity plan

5.4 Demonstrate accountability for organisation’s business continuity plan/s

6 Establish communication plan within organisation’s planning framework

6.1 Identify stakeholders and determine objective and scope of communication plan for periods before, during and after disruptions occur

6.2 Determine organisation’s communication capabilities in line with objectives and scope, and identify gaps and options for meeting shortfalls

6.3 Develop and implement across the organisation, appropriate risk and incident monitoring, reporting and escalation processes

7 Deliver business continuity professional development activities

7.1 Promote application of business continuity management framework and plan to all relevant personnel on an ongoing basis

7.2 Provide staff with appropriate information on cyclical review process of the business continuity management plan

7.3 Conduct business continuity management plan exercises in line with organisation’s policies and procedures

7.4 Conduct post-exercise debriefs, complete post-exercise reviews and update business continuity strategies and plans as required

7.5 Manage and record staff learning and development on the business continuity management framework in accordance with organisational requirements, and framework policies and procedures

7.6 Report on the outcomes of staff learning and development, and business continuity framework exercises to relevant personnel