Continuity management COPL
Developing, implementing and testing a business continuity framework.
Updates for SFIA 9
- There is an updated version of this skill for SFIA 9.
- Theme(s) influencing the updates for this skill: Application of SFIA skills for cloud-based working, Making SFIA easier to consume (enhance readability/guidance/descriptions).
- You can move to SFIA 9 when you are ready - SFIA 8 skill descriptions will still be available to use.
- Previous SFIA assessments or skills mapping are not impacted by this change.
Guidance notes
Activities may include — but are not limited to:
- identifying potential threats and assessing their business impact
- developing plans and procedures to respond to an incident
- ensuring critical business functions can continue with a planned level of disruption
- ensuring an acceptable level of service can be restored after a disruption
- developing organisational resilience
- assuring that continuity is being designed into systems, processes and ways of working
- implementing continuity management practices for cloud-based services
- enabling continuous delivery, deployment and integration of applications and infrastructure without adverse impact or disruption to service.
Incidents have a variety of causes, including — but not limited to — cyber-attacks, data breaches, organised crime, fires, floods, natural disasters, pandemics, health emergencies and supply chain failure.
Levels of responsibility for this skill
| 2 | 3 | 4 | 5 | 6 |
Continuity management: Level 1
This skill is not typically observed or practiced at this level of responsibility and accountability.
Continuity management: Level 2
Maintains records of all related testing and training and ensures the availability of all documentation.
Records the actions taken and the consequences following an incident or live testing of a continuity plan for a lessons-learned report.
Continuity management: Level 3
Applies a structured approach to develop and document the detail for a continuity plan.
Maintains documentation of business continuity and disaster recovery plans.
Supports the development of a test plan and implementation of continuity management exercises.
Continuity management: Level 4
Contributes to the development of continuity management plans.
Identifies information and communication systems that support critical business processes.
Coordinates the business impact analysis and the assessment of risks.
Coordinates the planning, designing, and testing of contingency plans
Continuity management: Level 5
Manages the development, implementation and testing of continuity management plans.
Manages the relationship with individuals and teams who have authority for critical business processes and supporting systems.
Evaluates the critical risks and identifies priority areas for improvement.
Tests continuity management plans and procedures to ensure they address exposure to risk and that agreed levels of continuity can be maintained.
Continuity management: Level 6
Sets the strategy for continuity management across the organisation.
Secures organisational commitment, funding and resources for continuity management.
Leads continuity management exercises.
Communicates the policy, governance, scope, and roles involved in continuity management. Has defined authority and accountability for the actions and decisions for continuity management
Continuity management: Level 7
This skill is not typically observed or practiced at this level of responsibility and accountability.