NNPC Business Continuity Processes PDF

NNPC Limited Investigation Processes and Procedures 3 Business Continuity Roles and Responsibilities One of the first steps in establishing a successful business continuity programme is defining and assessing key roles and responsibilities. Full details of the responsibilities associated with each...

NNPC Limited Investigation Processes and Procedures 3 Business Continuity Roles and Responsibilities One of the first steps in establishing a successful business continuity programme is defining and assessing key roles and responsibilities. Full details of the responsibilities associated with each of the roles are stated below: 3.1 Crisis Management Team (CMT)  Establish and maintain the BC policy, objectives, and plans  Communicate the importance of meeting the objectives and the need for continual improvement throughout the organization  Maintain an awareness of business needs and major changes  Ensure that business continuity requirements are determined and met to minimize risk and maintain effective strategies and plans  Determine and provide resources to plan, implement, monitor, review, and improve business continuity and management e.g., recruit appropriate staff, manage staff turnover  Oversee the management of business continuity risks to the organisation  Conduct management reviews of business continuity at planned intervals, to ensure continuing suitability, adequacy, and effectiveness  Review major business continuity incidents  Define and maintain business continuity management authorities and responsibilities NNPC Limited Investigation Processes and Procedures  Develop, review, and update the crisis management plan  Coordinate third parties that support NNPC during a crisis  Oversight over communications to keep employees, customers, the media, and other relevant stakeholders updated during a crisis. 3.2 Incident Management Team  Monitor and detect early signs of an emergency.  Determine incident management priorities and recovery requirements  Authorisation of additional resources for the purpose of response, recovery, and support  Advise the CMT on the need to restrict or modify normal NNPC operations for some period  Train all employees on what to do in a crisis.  Implement emergency measures and contingency plans  Arrange support services, such as first aid, mental health resources, and other contingencies in the event of a crisis.  Create a detailed report of all the steps undertaken in a crisis  Notify the relevant parties once the incident is over and normal business functionality has been restored 3.3  Business Continuity Manager Integration of business process with the BCM NNPC Limited Investigation Processes and Procedures  Report to Crisis Management on all business continuity-related matters regularly  Communicate the business continuity policy to all relevant personnel and customers where appropriate  Implement the requirements of the business continuity policy and ensure that business continuity strategies and plans are documented  Ensure that procedures are in place to define the recording, prioritization, business impact, classification, updating, escalation, resolution, and formal closure of all disruptions to business operations  Ensure that staff understand the roles they are fulfilling and that they have the appropriate skills and competence to do so. 3.4 Business Continuity Champions (Emergency Response/Business Recovery Team)  Support the implementation and adoption of business continuity requirements within their departments  Participate in business impact analyses and risk assessments concerning the asset(s) within the department  Carry out actions on the crisis management and business continuity plans as directed by the Incident Management team  Ensure departments are aware of the business continuity plans for their processes, if applicable  Responsible for specific, named business processes/ services. NNPC Limited Investigation Processes and Procedures 3.5  Information Technology Team (Technical Recovery Team) Management of related processes such as incident and change management  Provision of technical expertise in matters of business continuity  Implementation of technical business continuity solutions  Participate in the business continuity testing exercises e.g., data integrity testing  System administration e.g., backup of critical business information  Ensure every secondary or failover software, servers, devices, and cloud storage accounts are kept up to date 3.6  Department Managers Review and manage staff competencies and training needs to enable staff to perform their roles effectively within the business continuity area  Ensure that employees are aware of the relevance and importance of their activities and how they contribute to the achievement of established business continuity objectives 3.7  All Staff Ensure they are aware of and comply with all business continuity policies of the organisation relevant to their business role  Report any actual or potential incident