Beazley Plc · LSE:BEZ

Beazley — Investor Presentation (March 2020)

51 slides from Beazley's investor presentation, Mar 12, 2020

Slide 1: Business Continuity Planning For Small Business
Business Continuity Planning For Small Business March 12, 2020
Slide 2: Beazley Breach Response (BBR) Services workshop program
Beazley Breach Response (BBR) Services workshop program • Basics of Business Continuity Planning • Eligibility for other workshops • To learn more o Visit the Workshops page by clicking on Services on beazleybreachsolutions.com o Email bbrservices@beazley.com
Slide 4: Today's Presenter
Today’s Presenter Troy Harris Senior Director, Risk Consulting • 16 years in RSM’s national Business Continuity Planning consulting practice • Over 20 years of BCP experience − Experienced in both information technology (IT) disaster recovery planning and operations/business resumption planning − Se
Slide 5: Agenda
Agenda • Business Continuity Planning Overview • RSM’s 5-Phase BCP Methodology − Program Initiation − Requirements Definition − Strategy Determination − Implementation and Documentation − Program Management and Testing • Pandemic Planning • Question & Answer • Conclusions/Wrap-up 5 ©2020 RSM US LLP.
Slide 7: Business Continuity Plan (BCP) Definition
Business Continuity Plan (BCP) Definition • Documented and formal arrangements for resuming critical operations in a timely manner following a disaster or other disruption − “Timely” may equal “Immediate” − Degraded operations may suffice temporarily − Focus is on sustaining the organization − Opera
Slide 8: BCP vs. Broader Risk Management
BCP vs. Broader Risk Management* • Business Continuity • Other Risk Management Planning Elements: Initiatives: − Crisis Management − Emergency Response Plans/Crisis Plans Communication Plans − Incident Response − IT Disaster Recovery Plans/Incident Action Plans Plans − Information Security − Busines
Slide 9: Basic BCP Concepts
Basic BCP Concepts • Functions and systems must be inventoried and prioritized for recovery • BCPs should primarily address your aggregate risks and scenarios • Recovery processes should leverage pre-established strategies for key requirements • The organization’s BCP is a collection of multiple “re
Slide 12: Ongoing BCP Program
Ongoing BCP Program • Should encompass all facets of the BCP Program, including: − BCP Policy and Program Charter − Business Impact Analysis (BIA) − Disaster Risk Assessment (DRA) − Recovery strategies − BCP − Testing Schedule and Procedures − Training Schedule and Procedures 12 ©2020 RSM US LLP. Al
Slide 13: Ongoing BCP Program continued
Ongoing BCP Program continued • Activities should be performed according to an established schedule and in response to designated “triggering” events: − Log activities and report progress to Steering Committee, etc. − Respond to organizational changes, test results, audits, etc. − Adjust schedule an
Slide 15: Phase I – Summary
Phase I – Summary • Define project schedule and project management protocols • Formalize/confirm BCP roles • Publish BCP policy and charter • Establish BCP documentation repository • Conduct kick-off call(s)/meeting(s) 15 ©2020 RSM US LLP. All Rights Reserved.
Slide 16: BCP Roles
BCP Roles • Executive Sponsor • Steering Committee • Business Continuity Coordinator and/or Administrator(s) • Recovery Teams − Team Leaders − Alternate Team Leaders − Team Members (and Alternates) • Evaluators/Auditors • Liaisons 16 ©2020 RSM US LLP. All Rights Reserved.
Slide 18: Phase II – Summary
Phase II – Summary • Disaster Risk Assessment (DRA) − Analyze prevalent disaster threats to determine the associated risk − Evaluate mitigation of your greatest risks − Identify supplemental risk mitigation measures − Define likely disaster scenarios and a worst-case situation • Business Impact Anal
Slide 19: Disaster Risk Assessment (DRA) Process
Disaster Risk Assessment (DRA) Process • Assemble a comprehensive library of risk factors • Collect and analyze data from multiple sources − Perceptions − Government and industry authorities − Historical experiences − Observation − Other research • Assign ratings for Probability and appropriate Impa
Slide 21: BIA Process
BIA Process • Establish the BIA “framework” − Impact categories − Impact rating criteria and thresholds • Assemble a comprehensive inventory of business functions • Assess each function using the established framework • Determine acceptable outage tolerance, or Recovery Time Objective (RTO) • Identi
Slide 25: Phase III – Summary
Phase III – Summary • Identify current recovery strategies and the corresponding recovery capabilities • Map BIA requirements to current recovery strategies and capabilities • Identify and prioritize recovery capabilities gaps • Establish initiative(s) to remediate recovery gaps • Establish and exec
Slide 26: Recovery Strategy Coverage Areas
Recovery Strategy Coverage Areas • Technology − Hardware, software, and data − Voice and data communication − Third-party systems and interfaces • Facilities − Workspace − Data center(s) − Specialized sites (secure areas, lobbies, meeting rooms, etc.) • Specialized equipment and other resources • Op
Slide 27: Basic Recovery Strategy Options
Basic Recovery Strategy Options • Internal Resources • Specialized Vendors/Services • Business Partners • Public Resources • Acquire/Address As Needed 27 ©2020 RSM US LLP. All Rights Reserved.
Slide 28: Vendor Continuity Management Program
Vendor Continuity Management Program • Risk-rate ALL suppliers and services-providers − Different than other vendor risk assessments − Rating based on their impact to the continuity of your operations − Consider criticality of product/service, portability, etc. − Include technology providers • Evalu
Slide 30: Phase IV – Summary
Phase IV – Summary • Prepare actionable “playbooks” to guide the recovery process • Document teams/roles, recovery processes and supporting information for reference following a disaster • Properly and efficiently integrate SOPs and other reference information • Address specialized considerations fo
Slide 31: BCP "Playbooks"
BCP “Playbooks” • Recovery Coordination • Business Resumption Plans (RCPs) Plans (BRPs) − BCP activation − Team overview − Damage − Functions and RTOs assessment − Team roster and roles − Internal and − Recovery strategies external − Recovery task list communication − Recovery resource − Overall rec
Slide 32: RPO RTO Recovery Tasks
Recovery Tasks IT Backup IT Disaster Plan Recovery (DR) Plan RPO RTO Temporary Operating Procedures (TOPs) Restoration Activities 32 ©2020 RSM US LLP. All Rights Reserved.
Slide 33: BCP "Playbooks" continued
BCP “Playbooks” continued • IT Disaster Recovery Plans (DRPs) − Overview and scope − Team assignments (including alternates) − Recovery priorities and RTOs − Recovery strategy or strategies − Resource requirements − Technical restoration tasks − Interdependencies and other considerations − Reference
Slide 35: Phase V – Summary
Phase V – Summary • Train personnel on the overall BCP and their specific recovery roles • Conduct varying and evolving BCP exercises − Verify the BCP is accurate, adequate and usable − Validate effectiveness of recovery strategies − Allow participants to experience key recovery processes and practi
Slide 36: BCP Testing Program – Best Practices
BCP Testing Program – Best Practices • Vary test type, scope, scenario, participants, timing, etc. • Consider realistic and unpredictable disaster circumstances • Elevate complexity and expand scope over time • Properly plan each event with known objectives • Evaluate and document/report all tests a
Slide 38: Pandemic Planning
Pandemic Planning “Recognized variation from traditional BCPs” • Little or no impact on facilities, technology, etc. • Major impacts on staffing, customers, vendors, community, etc. • Leverage and integrate with Crisis Management Plans, or RCTs • Key Considerations: − Prevention and containment − Pe
Slide 39: Pandemic Response Plans – Objectives
Pandemic Response Plans – Objectives • Protect your staff and customers • Continue your critical operations • Minimize the impact on your community, customers, employees, etc. • Reduce the impact from inaction or bad decisions by others 39 ©2020 RSM US LLP. All Rights Reserved.
Slide 40: Pandemic Response Plans – Skills Considerations
Pandemic Response Plans – Skills Considerations • Number of people available in each department, function, workgroup, etc. • Specialized skill concentrations (including home geography) • Internal staff with needed skills able to assist other departments • Availability of external staff for temporary
Slide 41: Pandemic Response Plan – Enterprise
Pandemic Response Plan – Enterprise • Overview • Preemptive Measures Action Plan − Mitigation Framework − Active Measures • Incident Management Framework − Incident Management Structure − BCP Integration − Communications and Coordination − Response Direction • Pandemic Response Framework − Internal
Slide 47: Key Elements of an Effective BCP Program
Key Elements of an Effective BCP Program • Solid organizational commitment − Management visibly endorses the risk mitigation and recovery planning initiative • Effective risk management − Disaster risks are identified and sound mitigation measures have been implemented • Thorough BIA − Disruption im
Slide 48: Key Elements of an Effective BCP Program continued
Key Elements of an Effective BCP Program continued • Viable recovery strategies − Techniques for achieving critical recovery objectives are defined and fully implemented • Documented recovery plan − Recovery processes are defined, responsibilities assigned and reference information is available • Ef
Slide 49: Key Elements of an Effective BCP Program continued
Key Elements of an Effective BCP Program continued • Plan testing and maintenance − Realistic exercises are conducted to confirm plan accuracy, prepare participants to respond and identify enhancement opportunities − The plan is updated on a defined schedule and whenever the organization, operation
Slide 50: Key Elements of an Efficient BCP Program
Key Elements of an Efficient BCP Program • Established goals and objectives • Clear roles and responsibilities • Defined standards, methodologies, and techniques • Ongoing and regular collaboration • Proficient resource utilization • Useful and productive tools • Formal reporting and monitoring • Re
Slide 51: RSM US LLP contact details
RSM US LLP One South Wacker Drive, Suite 800 Chicago, IL 60606 312.634.3400 +00 (1) 800 274 3978 www.rsmus.com This document contains general information, may be based on authorities that are subject to change, and is not a substitute for professional advice or services. This document does not const

Beazley — Investor Presentation (March 2020) on 6ix

Beazley — Investor Presentation (March 2020)

Slide 1: Business Continuity Planning For Small Business

Slide 2: Beazley Breach Response (BBR) Services workshop program

Slide 3: Business Continuity Planning for Small Business

Slide 4: Today's Presenter

Slide 5: Agenda

Slide 6: Business Continuity Planning Overview

Slide 7: Business Continuity Plan (BCP) Definition

Slide 8: BCP vs. Broader Risk Management

Slide 9: Basic BCP Concepts

Slide 10: RSM's 5-Phase BCP Methodology

Slide 11: RSM's Business Continuity Planning Methodology

Slide 12: Ongoing BCP Program

Slide 13: Ongoing BCP Program continued

Slide 14: Phase I: Program Initiation

Slide 15: Phase I – Summary

Slide 16: BCP Roles

Slide 17: Phase II: Requirements Definition

Slide 18: Phase II – Summary

Slide 19: Disaster Risk Assessment (DRA) Process

Slide 20: DRA Sample

Slide 21: BIA Process

Slide 22: Business Impact Analysis (BIA)

Slide 23: BIA Sample

Slide 24: Phase III: Strategy Determination

Slide 25: Phase III – Summary

Slide 26: Recovery Strategy Coverage Areas

Slide 27: Basic Recovery Strategy Options

Slide 28: Vendor Continuity Management Program

Slide 29: Phase IV: Implementation and Documentation

Slide 30: Phase IV – Summary

Slide 31: BCP "Playbooks"

Slide 32: RPO RTO Recovery Tasks

Slide 33: BCP "Playbooks" continued

Slide 34: Phase V: Program Management and Testing

Slide 35: Phase V – Summary

Slide 36: BCP Testing Program – Best Practices

Slide 37: Pandemic Planning

Slide 38: Pandemic Planning

Slide 39: Pandemic Response Plans – Objectives

Slide 40: Pandemic Response Plans – Skills Considerations

Slide 41: Pandemic Response Plan – Enterprise

Slide 42: Response Level Thresholds Examples

Slide 43: Response Level Strategies Examples

Slide 44: BRPs – Pandemic Considerations Examples

Slide 45: ©2020 RSM US LLP. All Rights Reserved.

Slide 46: Conclusions/Wrap-up

Slide 47: Key Elements of an Effective BCP Program

Slide 48: Key Elements of an Effective BCP Program continued

Slide 49: Key Elements of an Effective BCP Program continued

Slide 50: Key Elements of an Efficient BCP Program

Slide 51: RSM US LLP contact details