Introduction
Dear Rachel,
Re. Risk Management & Documentation review 2023
Thank you for the opportunity to provide Forte Health with a proposal for two risk workshops and documentation review.
Forté Health has identified the need to conduct an update of their business continuity program to ensure the appropriate level of preparedness in the event of a business disruption. This includes the following elements:
- Business Continuity framework
- Business Impact Analysis
- Business Continuity Plans
- Business Continuity Training
To ensure that Forté Health personnel are able to respond effectively in the event of a disruption, Fixinc also proposes to conduct activities to validate the data in Business Continuity Plans and build awareness of how to use these tools amongst key personnel.
All activities are performed by highly qualified and experienced consultants.
Fixinc provides unparalleled expertise to leading organisations and are widely recognised as the market leaders in the business continuity and crisis management fields. With extensive experience collaborating within IT environments, Fixinc has gained a deep understanding of Canberra Data Centres’s environment, enabling us to provide unmatched expertise to top organizations. This has resulted in our recognition as market leaders in the domains of incident and crisis management. Some of our recent clients include:
- NEXTDC
- PLANB
- NTT Global Data Centres
- Optus
- Singtel
- University of Technology Sydney
Alyssa, at Fixinc our passion is centred around empowering people to confidently tackle any challenge, it’s our way of helping you build a resilient future. To this end, we guarantee a highly professional and practical outcome that will provide you with the assurance that Canberra Data Centres has the appropriate measures in place in the event of a business disruption.
Thank you for the opportunity to submit this proposal and I look forward to the opportunity of working with you soon. Please do not hesitate to contact me if you have any questions.
Developing your resilience
Project Engagement
This is an opportunity to introduce the Fixinc team who will be running the project to the Canberra Data Centres project sponsors. The meeting will confirm the scope and key business continuity priorities.
Prior to a formal engagement meeting, Fixinc will review all of Canberra Data Centres existing business continuity documents to assess the level of preparedness and compliance with key standards. This includes risk assessments, Business Impact Analysis worksheets, Business Continuity Plans and any recent training, testing and exercising documentation.
Fixinc will then facilitate an engagement meeting with key representatives from Canberra Data Centres to verify the review scope and key business continuity priorities.
When evaluating the existing program, Fixinc will identify strengths that can be further capitalised on to build greater resilience and weaknesses that need to be addressed to ensure a robust capability exists within the organisation.
Business Impact Analysis and Threat Assessment
During the BIA meeting, Fixinc will review the current BIA templates provided by the business unit representative. After the meeting, the business unit representative will have the opportunity to review the findings with their business unit leaders and finalise the BIA.
A clear understanding of the {clientname} key priorities and dependencies are essential to build effective business continuity strategies. To achieve this, Fixinc will develop a Business Impact Analysis (BIA) through the facilitation of consultative interviews with business unit representatives.
For each area of the Oganisation that undertakes the BIA, outcomes of the BIA process will include confirmation of:
- All mission-critical functions
- Allowable outages and recovery timeframes for each critical function
- Resource requirements and critical dependencies
As part of the BIA process, Fixinc will also facilitate a threat assessment for {clientname} using our proprietary threat forecasting tools to assess relevant business continuity vulnerabilities and plausible disruption scenarios that may impact critical business functions, as identified in the BIAs. This will include:
- Identification and categorisation of disruption related threats.
- Review of likely causes, existing controls and potential impacts.
- Prioritisation of all identified risks based on likelihood and impact ratings.
- Grouping and prioritisation of risks into key disruption scenarios.
Project Engagement
This is an opportunity to introduce the Fixinc team who will be running the project to the Canberra Data Centres project sponsors. The meeting will confirm the scope and key business continuity priorities.
Prior to a formal engagement meeting, Fixinc will review all of Canberra Data Centres existing business continuity documents to assess the level of preparedness and compliance with key standards. This includes risk assessments, Business Impact Analysis worksheets, Business Continuity Plans and any recent training, testing and exercising documentation.
Fixinc will then facilitate an engagement meeting with key representatives from Canberra Data Centres to verify the review scope and key business continuity priorities.
When evaluating the existing program, Fixinc will identify strengths that can be further capitalised on to build greater resilience and weaknesses that need to be addressed to ensure a robust capability exists within the organisation.
Incident Management Exercise
The Incident Management Plan should not be considered final until it has been thoroughly validated. The validation process should not only apply to the plan but also to the individuals who will be implementing it. Fixinc will deliver a realistic, thought-provoking exercise for the {clientname} Incident Management Team.
Exercise Planning
Fixinc, in collaboration with {clientname}, will hold a planning session to determine the extent of the scenario exercise, establish exercise goals, and review critical performance metrics. This will guarantee that the exercise program meets the expectations of stakeholders and provides benefits to everyone involved.
After the planning meeting, Fixinc will draft an exercise plan for {clientname} that outlines all necessary information for the exercise program, including:
• Exercise objectives
•Exercise methodology
• Exercise scope and scale
• Communications
• Roles and responsibilities
• Resource requirements
• Timeframes and timescales
• Internal exercise participants
• Performance criteria
Exercise Development
Fixinc will establish and arrange all necessary components for {clientname}'s exercise program, including:
• Selection and development of the preferred exercise scenario.
• Creation of exercise schedules that outline all inputs and interactions during the exercise.
• Involvement of both internal and external participants in the exercise.
• Selection and briefing of exercise volunteers.
• Conducting briefings for participants in the exercise.
Maintenance Program
Take your corporate and personal resilience to the next level by running an annual maintenance program with Fixinc. Build a strong, positive culture of resilience.
- Annual engagement meeting with key stakeholders.
- Provision of annual maintenance schedule .
- Development of annual exercise strategy.
- Annual BIA review interviews to update BIA and Threat Landscape.
- Full review and update of all business continuity related documentation.
- Distribution of revised plans (soft copy).
- 1 x 45-minute business continuity awareness session.
- 1 x 3-hour annual Crisis Leadership training session.
- 1 x 3-hour annual Crisis Scenario Exercise.
- Provision of post-exercise reports.
- Provision of revised soft copy BCP documentation.
- Management and maintenance of business continuity related training records.
- Provide executive/board presentations as required.
- Provision of Annual Assurance Statement.
Advisory Board
Four of the very best supporting you through the tactical, operational, and strategic response to an event, anywhere in the world, at any moment.
Four senior resiliency professionals available any time, guiding you through any disruption, anywhere in the world at the click of a button.
An intelligent portal.
Relevant Standards.
ISO 22301:2019
Business Continuity
BS11200:2014, Crisis Management
ISO 31000
Risk Management
AS: 3745
Industry specific legislation
Timeframes & Resources
Project Engagement
Business Impact Analysis and Threat Assessment
Project Engagement
Incident Management Exercise
Review and approve exercise plan.
Review and approve scenario and run sheet.
Attend 3-hour desktop scenario exercise.
Review and approve post-exercise report.
Program Team.
Brad is the Global Head of Consulting within the Fixinc Consulting practice and also oversees our entire Advisory Board. He has over 25 years of Business Continuity and IT commercial experience, working across Asia, UK, Europe, New Zealand and Australia. Brad is responsible for the management and implementation of numerous business continuity and crisis management projects across a variety of industries, including not-for-profit, telecommunications, technology, government, financial services, education, infrastructure and utilities.
He is highly experienced in all aspects of the business continuity lifecycle and designed the unique 'Tungsten Diamond' diagram for Fixinc. His experience stretches through policy development, business impact assessments, strategy development, business continuity plan development and implementation and facilitation of business continuity training and scenario exercises. Brad brings strong business strategy, workshop facilitation, project management and analytical problem-solving skills with a visible passion for assisting organisation build their resilience capabilities.
Prior to working for Fixinc, Brad served 15-years with the British Army as a tank commander, seeing 2 tours of activity duty where he was awarded with the Northern Ireland Clasp for Operation Banner and NATO Medal for Yugoslavia during the Bosnia conflict. During this time he was a communications and cold weather survival instructor and has had extensive incident response experience fighting terrorism and supporting organisations such as Médecins Sans Frontières and UNHCR.
Brad’s business continuity and incident management qualifications were put to the test during the 2011 Christchurch earthquakes, whilst working for the Christchurch Polytechnic Institute of Technology (Now recognised as Ara). He initiated and ran two incident management cells for the February 2011 and June 2011 earthquakes, ensuring services could be established in temporary sites within a week of the disaster.
Brad holds the Business Continuity Institute (BCI) CBCI training qualification and has trained many students in the certification course on behalf of the BCI. He also held the award of Business Continuity Consultant of the year for Australasia in 2015.
Ollie brings over a decade of industry experience in digital marketing and product development, with specific expertise in no-code solutions and application automations. His experience has enabled him to design and develop digital marketing campaigns that drive commercial market opportunities on mass-scale, and identify emerging applications to support internal organisational and end-user experiences. Career highlights include positions with Centrica (British Gas), Jaguar Land Rover, and Accounting Web, where he built competitive and disruptive marketing campaigns supporting Xero in their introduction to the UK market.
Ollie is a multi-business owner and entrepreneur, with a passion and focuses on converting 'old-school' methods into modernised, competitive solutions. Ollie brings valuable experience working across a number of private and government entities within the UK and Europe, Asian, and Australia and New Zealand.
He is the majority shareholder, founder and Managing Director of Fixinc Solutions (Fixinc Directory), Co-Founder and Managing Director of Fixinc Consulting Partners (Fixinc Advisory Board), and co-Director of the Fixinc Group.
A father and son, on a mission.
We are playing the infinite game. No one supplier can be the best, but organisations should have access to the best solutions. Our passion for the industry and careful management of deep relationships with fellow practitioners and industry bodies places us as a premium supplier. Our programs speak for themselves, set upon three simple approaches:
Community
Communication
Corporate sustainability
Fixinc Loyalty Program
Money off
Extra services
45 to 60 minutes
45-minutes with your stakeholders or relevant program contacts is all we need. We will share how implementation works with us, provide an idea on how we'd run your program (or overcome your problems), then provide a valuable Q&A for both parties.
Within 1-week. 30-min call.
During our discovery call, we'll book our next meeting with you a week from now. This will give you time to review the scope and compile questions with us.
1 hour
If there are any changes, we can make these immediately after the call and reissue you a new version of your proposal (archiving the original).
1 week
After signing digitally via the online proposal, we'll have your engagement meeting booked in with a senior consultant or program manager within a week.
“Our resilience consultants are available to shoulder the burdens of your project, ensuring timely and cost-effective delivery. Here, you'll have a chance to meet them and build meaningful relationships."
Brad, Global Head of Consulting and co-Founder
Developing a comprehensive business resilience plan across your organisation requires a fundamental understanding of your organisation's products and services, and the critical business functions that support them. This knowledge is crucial to ensure a holistic approach to business resilience and is a process Fixinc take extremely seriously.
Make sure your clear on everything we're offering.
Client References.
The scope of the program was to deliver a Business Continuity Program to AIA Head office, Auckland in line with Executive and Board level requirements.
All training and work was done on-site.
Phase 1:
- Facilitate a Business Impact Analysis (BIA) meetings and deliver BIA report.
- Develop Master Business Continuity Plans for each AIA Head Office.
Phase 2:
- Deliver Business Continuity Training for Business Continuity Teams.
- Deliver Business Continuity scenario exercises for Business Continuity Team.
Phase 3:
- Deliver incident management training.
The scope of the program was to deliver a Business Continuity Program review across 13 Faculties and Business Units at the Sydney Campus.
The program was delivered on site and via remote meetings.
Phase 1:
• Facilitate Business Impact Analysis (BIA) meetings and deliver BIA report.
• Update Business Continuity Plans for each Faculty and Business Unit.
Phase 2:
• Deliver Business Continuity training for BC Teams.
• Deliver Business Continuity scenario exercises.
Speaking to our team.
Office
Your Investment with Fixinc.
Investment
- 30 minute engagement meeting with project sponsors.
- Provision of soft copy project schedule.
- x10 BIA meetings.
- Provision of softcopy BIA documentation.
- 30 minute engagement meeting with project sponsors.
- Provision of soft copy project schedule.
• Development of exercise plan.
• Setup of exercise, creation of scenario and development of run sheets.
• Onsite facilitation of 1x 3-hour desktop exercise.
• Provision of 1x Fixinc facilitator and 1x offsite support resource for injects.
• Provision of hot debrief.
• Provision of post-exercise report and recommendations.