Management Response and Action Plan for Audit of Business Continuity Plans for Critical Services

September 2022

Recommendation 1

The Corporate Services Branch (CSB) should coordinate with ADMs and VPs to validate the list of critical services and complete this work as a first priority.

Management response

Management supports this recommendation.

Planned management action Deliverables Expected completion date Responsibility

CSB will coordinate and support a phased action plan to address this recommendation.

Branch Heads will ensure necessary resources and support for their service owners to validate the criticality of their services. For example, Branch Heads could integrate Business Continuity Management (BCM) activities into their Branch operational plans or equivalent.

A BCM Action Plan was developed to guide BCM program improvements. The timelines have been established and approved by the Partnership Crisis Management Committee. February 2022 Lead:
CSB, RPSD, NSMD
Business Impact Analysis training series addressing: validation of critical services, continuity requirements, business impact analysis

July 2021 to January 2023

Ongoing (two series of three sessions annually)

Lead:
CSB, RPSD, NSMD
A branch head validated list of Critical Services for each branch. July 30, 2022 OPIs HC:
Branch Heads
Service owner completed and approved Business Impact Analysis. March 31, 2023 OPIs PHAC:
Branch Heads

Recommendation 2

CSB should collaborate with ADMs and VPs to modernize the BCP tool so that it is functional and relevant for branches.

Management response

Management agrees that a modern suite of tools is required.

Planned management action Deliverables Expected completion date Responsibility
CSB will launch a project to develop and implement a tool and engage branches to ensure that it meets business needs. Interim Business Continuity Planning (BCP) tool is developed and piloted. August 31, 2022 Lead:
CSB, RPSD, NSMD
Assessment of lessons learned. September 2022 Lead:
CSB, RPSD, NSMD
BCP interim tool is fully launched including branches trained. November 30, 2022 Lead:
CSB, RPSD, NSMD
A project to develop and implement a digital solution is initiated including assessment for existing GC BCP tools. March 31, 2023 Lead:
CSB, RPSD, NSMD

Recommendation 3

CSB should develop and implement a formal monitoring program to ensure BCPs are developed for all critical services and that they are tested and updated on a regular basis.

Management response

Management agrees that a more formal monitoring program be established.

Planned management action Deliverables Expected completion date Responsibility
CSB will review and update the Department and Agency’s business continuity management practices for monitoring and corrective measures in support of BCPs for critical services. Guidance materials and tools for branches to ensure BCPs are developed. November 30 2022 Lead:
CSB/CSO, RPSD
Cyclical monitoring and testing program developed and implemented with all branches having critical services. March 31, 2023 CSB Lead with all Branch Heads
Semi-annual reporting of monitoring and testing results, including branch head approved corrective actions to senior management. Baseline April 2023 and semi-annually thereafter

CSB oversight and reporting

All Branch Heads with critical services

Page details

Date modified: