The Role of Internal Audit in BCP

The Role of Internal Audit In Business Continuity Planning

Dan Bailey, MBCP

? 2005 Protiviti Inc.

Page 0

Introduction

Dan Bailey, MBCP

Senior Manager Protiviti Inc. dan.bailey@

? Actively involved in the Information Technology industry since 1984 ? Actively involved in the Business Continuity industry since 1991 ? Received CBCP designation in 1999; MBCP designation in 2002 ? Co-Founder of the Arkansas chapter of the Association of Contingency

Planners ? 2002 President of the North Texas chapter of the Association of

Contingency Planners ? 2003-2005 DRI International Certification Commissioner ? 2006-2008 DRI International Vice-Chair of the newly established Education

Commission

? 2005 Protiviti Inc.

Page 1

Agenda

? Establishing A Framework ? Internal Audit ? Adding Value to the BCP

Process ? Information Available to the Internal Auditor ? Proven Approaches to Conducting a BCP Audit ? SOX Section 404? ? Wrap-up and Summary

"By 2008, we believe more than 50% of the G2000 will have robust and tested BC plans, with the remainder attempting to enhance their capabilities beyond rudimentary BC and disaster recovery through 2012." - META Group (February 2003)

? 2005 Protiviti Inc.

Page 2

Section I

Establishing A Framework

? 2005 Protiviti Inc.

Page 3

Business Continuity Management Defined

...the development of strategies, plans and actions which provide protection or alternative modes of operation for those activities or business processes which, if they were to be interrupted, might otherwise bring about a seriously damaging or potentially fatal loss to the enterprise.

BCM = Crisis Management + Business Resumption Planning + IT Disaster Recovery Planning

? 2005 Protiviti Inc.

Page 4

................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download