Audit of Business Continuity Planning (BCP)

Final Audit Report

Audit and Evaluation Branch

June 2006

Tabled and approved by DAEC on January 9, 2007

Audit of Business Continuity Planning (BCP)
Industry Canada (IC)

TABLE OF CONTENTS

1.0

EXECUTIVE SUMMARY .............................................................................................. 2

1.1
INTRODUCTION ................................................................................................................ 2
1.2
OVERALL ASSESSMENT.................................................................................................... 2
1.3
MAIN FINDINGS, CONCLUSIONS AND RECOMMENDATIONS ............................................. 2
1.3.1 Business Continuity Plan Governance (See Section 3.1 of the BCP Standard) ......... 2
1.3.2 Business Impact Analysis (See Section 3.2 of the BCP Standard).............................. 3
1.3.3 Business Continuity Action Plans and Arrangements (See Section 3.3) .................... 4
1.3.4 BCP Program Readiness (See Section 3.4 of the BCP Standard) .............................. 5
1.3.5 BCP Training and Awareness (See Section 3.4 of the BCP Standard) ...................... 5
2.0

INTRODUCTION............................................................................................................. 7

2.1
BACKGROUND .................................................................................................................. 7
2.1.1 Treasury Board of Canada Secretariat (TBS) Policy ................................................. 7
2.1.2 Industry Canada Policy .............................................................................................. 7
2.1.3 Industry Canada’s Identification of Critical and Essential Services.......................... 8
2.1.4 Public Safety and Emergency Preparedness Canada