Business Impact Analysis Consultant
BACKGROUND
The United Nations Children*s Fund (UNICEF) is mandated by the United Nations General Assembly to advocate for the protection of children's rights, to help meet their basic needs and to expand their opportunities to reach their full potential. The Organisation is guided by the Convention on the Rights of the Child and strives to establish children's rights as enduring ethical principles and international standards of behaviour towards children.
SCOPE OF WORK
In order to strengthen Business Continuity Management (BCM), UNICEF intends to engage a consultant to conduct a full review and update of the Business Impact Analysis (BIA), for their Headquarters in New York City, inclusive of a full Risk Analysis and Continuity Requirements Analysis.
The outcome of the BIA will be to provide key inputs for the UNICEF NYHQ second generation BCP, including a better understanding of the organisation*s critical, time-sensitive functions and processes, the costs and consequences of a disruption, dependencies and interdependencies between activities / processes and the minimum service levels required during the recovery period for each activity / process. Using the information, a determination will be made as to the order in which functions and processes should be restored, as well as regarding the resources required during restoration.
As some IT business applications are distributed to UNICEF field offices, a written survey covering a representative selection of Regional and Country offices will be undertaken to make a determination of their perceived support needs provided from UNICEF HQ in New York.
The outcomes from the Business Impact Analysis will be, for each UNICEF HQ activity or service;
* To document the impacts over time that would result from its loss or disruption
* To identify the Maximum Tolerable Period of Disruption (MTPD) and thus the priorities for recovery. Factors that are to be considered in estimating the MTPD will include:
o The impact on staff and / or public well-being
o The impact of breaches of statutory duties or regulatory requirements
o Damage to reputation
o Damage to financial viability
o Deterioration of service quality
o Environmental damage
o Seasonality and variability factors
* To identify the Maximum Tolerable Data Loss (MTDL) and determine the impacts of loss of data (electronic and other) from which UNICEF would be unable to recover its operational capability.
* To identify the dependencies and interdependencies (both internal and external) that are required to enable each activity to operate effectively.
A Risk Analysis (RA) will be integral to this BIA process. It will need to identify the threats that could disrupt UNICEF*s performance, and determine the probability (likelihood) and probable consequences (impact) of each threat. This analysis will then be used to identify measures that need to be put in place to reduce the likelihood of an interruption to UNICEF*s most urgent activities and the impact, should those risks be realised.
The outcomes from the Risk Analysis will be:
o A list of the threats that could cause a disruption to UNICEF*s most urgent activities, prioritised by likelihood and level of impact.
o The identification of any unacceptable single points of failure.
o Recommendations on actions to be taken to reduce the threat of disruption to the organisation*s most urgent activities.
A Continuity Requirements Analysis (CRA) will be required as part of this BIA to collect information on the resources required to resume and continue the business activities that support UNICEF*s objectives and obligations. Its purpose will be to:
* Provide the resource information from which an appropriate recovery strategy can be determined / recommended.
* Identify resource requirements resulting from activity dependencies that exist both internally and externally.
SCHEDULE OF DELIVERABLES
The services are expected to be delivered within 12 weeks, as per the following schedule:
Initial Report * 6 weeks after start date
The consultant will be required to:
* assess existing Business Continuity materials, including the BCM Policy and the BCP tools.
* complete a data gathering exercise through interviews, questionnaires and surveys.
* complete a data gathering exercise of a representative sample of UNICEF Regional and Country Offices by the utilisation of questionnaires to determine the critical business processes (e.g. payroll, payment processing, etc; through SAP/Vision Applications) and thus identify their maximum acceptable downtime, Recovery Time Objectives and any alternative work methods in the case of the non-availability of UNICEF NYHQ business systems.
* present the initial BIA findings, including the RA and CRA, by the end of the sixth week.
Interim Report * 8 weeks after the start date
At the end of the eighth week, the consultant will be required to submit the interim report. This report should include:
* The functions, activities and processes that cut across several departments in New York HQs and the owners of these services and processes.
* The identity of UNICEF staff whom are subject matter experts regarding UNICEF business functions and processes.
* The impacts which may result if these services and processes are interrupted, in terms of staff safety and security and damage to the organisation*s reputation, assets and funding.
* The timeframe within which both financial and non-financial impacts of disruption on each function / process will be realised.
* The timescale within which the interruption of each function / process becomes unacceptable to the organisation (Maximum Tolerable Period of Disruption (MTPD))
* A determination of the impacts of loss of data (electronic and other) from which UNICEF would be unable to recover its operational capability. (The Maximum Tolerable Data Loss (MTDL))
* Resource requirements over time to enable functions / processes within the organisation to achieve continuity or resumption within the timeframes established as part of the BIA (Recovery Time Objectives). Resources will include:
o staff numbers and key skills;
o vital records and data currency (Recovery Point Objective);
o applications and systems;
o infrastructure (network links);
o facilities (existing and alternate locations);
o suppliers, partners and stakeholders and their inter-dependencies (intra-organisation and external); and
o constraints (such as contractual issues)
* The internal and external threats that could cause a disruption and their probability and impact.
* Prioritisation of the threats (risk levels) according to an agreed formula (high probability and high impact receive high priority)
* The resources required to resume and continue the business activities to support the UNICEF*s objectives and obligations
* A risk management control programme and action plan
Draft Report * 11 weeks after start date
* A comprehensive draft report should be submitted by the end of the eleventh week. A separate report is required for each department. The draft report will be submitted to the Chair of the UNICEF Crisis Management Team for consideration and approval of the CMT. All the questionnaires, survey reports and interview recordings should be submitted with the draft report.
Final Report * 12 weeks after start date
* After incorporating comments provided by the CMT, the consultant will be required to submit the final report, including separate final reports for each HQ department.
KEY QUALIFICATIONS
The Consultant will require:
* Either an Advanced Degree in a related subject area or at least 8 years progressively responsible professional experience in Business Continuity and / or Disaster Recovery and / or Emergency Planning, including research or evaluative work in this area;
* Qualified in Business Continuity Management with extensive experience in conducting BIAs, RAs and CRAs, as well as a track record of implementing BIAs, RAs and CRAs in organisations of comparable scale and complexity;
* Certified and/or accredited by the Business Continuity Institute (BCI) and/or the Disaster Recovery Institute International (DRII);
* Fluent in English with excellent writing skills;
* Proven excellent research skills including the development and application of analytical frameworks and tools and the production of analytical reports on issues and/or performance in Business Continuity;
* Proven excellent interview skills and experience of successfully interfacing with staff at all levels of an organisation.
INSTITUTIONAL ARRANGEMENTS
The consultant will be required to report directly to the UNICEF Business Continuity Manager, who will provide the lead for UNICEF during the consultancy.
Terms and Conditions
Contract type: Individual or Corporate contract
Duration of assignment: 12 weeks
Location: UNICEF Headquarters, New York.
Travel: Office-based, with possibly occasional travel.
How to Apply
Please send a detailed comprehensive CV in English by 7 February 2011 to wsmith@unicef.org
In your response please state your inclusive cost for completing the requirements of the contract.
The Organization does not sponsor for the H1 Visa.
Applications must be received by 7 February 2011. Only candidates who are shortlisted will be contacted.
The United Nations Children*s Fund (UNICEF) is mandated by the United Nations General Assembly to advocate for the protection of children's rights, to help meet their basic needs and to expand their opportunities to reach their full potential. The Organisation is guided by the Convention on the Rights of the Child and strives to establish children's rights as enduring ethical principles and international standards of behaviour towards children.
SCOPE OF WORK
In order to strengthen Business Continuity Management (BCM), UNICEF intends to engage a consultant to conduct a full review and update of the Business Impact Analysis (BIA), for their Headquarters in New York City, inclusive of a full Risk Analysis and Continuity Requirements Analysis.
The outcome of the BIA will be to provide key inputs for the UNICEF NYHQ second generation BCP, including a better understanding of the organisation*s critical, time-sensitive functions and processes, the costs and consequences of a disruption, dependencies and interdependencies between activities / processes and the minimum service levels required during the recovery period for each activity / process. Using the information, a determination will be made as to the order in which functions and processes should be restored, as well as regarding the resources required during restoration.
As some IT business applications are distributed to UNICEF field offices, a written survey covering a representative selection of Regional and Country offices will be undertaken to make a determination of their perceived support needs provided from UNICEF HQ in New York.
The outcomes from the Business Impact Analysis will be, for each UNICEF HQ activity or service;
* To document the impacts over time that would result from its loss or disruption
* To identify the Maximum Tolerable Period of Disruption (MTPD) and thus the priorities for recovery. Factors that are to be considered in estimating the MTPD will include:
o The impact on staff and / or public well-being
o The impact of breaches of statutory duties or regulatory requirements
o Damage to reputation
o Damage to financial viability
o Deterioration of service quality
o Environmental damage
o Seasonality and variability factors
* To identify the Maximum Tolerable Data Loss (MTDL) and determine the impacts of loss of data (electronic and other) from which UNICEF would be unable to recover its operational capability.
* To identify the dependencies and interdependencies (both internal and external) that are required to enable each activity to operate effectively.
A Risk Analysis (RA) will be integral to this BIA process. It will need to identify the threats that could disrupt UNICEF*s performance, and determine the probability (likelihood) and probable consequences (impact) of each threat. This analysis will then be used to identify measures that need to be put in place to reduce the likelihood of an interruption to UNICEF*s most urgent activities and the impact, should those risks be realised.
The outcomes from the Risk Analysis will be:
o A list of the threats that could cause a disruption to UNICEF*s most urgent activities, prioritised by likelihood and level of impact.
o The identification of any unacceptable single points of failure.
o Recommendations on actions to be taken to reduce the threat of disruption to the organisation*s most urgent activities.
A Continuity Requirements Analysis (CRA) will be required as part of this BIA to collect information on the resources required to resume and continue the business activities that support UNICEF*s objectives and obligations. Its purpose will be to:
* Provide the resource information from which an appropriate recovery strategy can be determined / recommended.
* Identify resource requirements resulting from activity dependencies that exist both internally and externally.
SCHEDULE OF DELIVERABLES
The services are expected to be delivered within 12 weeks, as per the following schedule:
Initial Report * 6 weeks after start date
The consultant will be required to:
* assess existing Business Continuity materials, including the BCM Policy and the BCP tools.
* complete a data gathering exercise through interviews, questionnaires and surveys.
* complete a data gathering exercise of a representative sample of UNICEF Regional and Country Offices by the utilisation of questionnaires to determine the critical business processes (e.g. payroll, payment processing, etc; through SAP/Vision Applications) and thus identify their maximum acceptable downtime, Recovery Time Objectives and any alternative work methods in the case of the non-availability of UNICEF NYHQ business systems.
* present the initial BIA findings, including the RA and CRA, by the end of the sixth week.
Interim Report * 8 weeks after the start date
At the end of the eighth week, the consultant will be required to submit the interim report. This report should include:
* The functions, activities and processes that cut across several departments in New York HQs and the owners of these services and processes.
* The identity of UNICEF staff whom are subject matter experts regarding UNICEF business functions and processes.
* The impacts which may result if these services and processes are interrupted, in terms of staff safety and security and damage to the organisation*s reputation, assets and funding.
* The timeframe within which both financial and non-financial impacts of disruption on each function / process will be realised.
* The timescale within which the interruption of each function / process becomes unacceptable to the organisation (Maximum Tolerable Period of Disruption (MTPD))
* A determination of the impacts of loss of data (electronic and other) from which UNICEF would be unable to recover its operational capability. (The Maximum Tolerable Data Loss (MTDL))
* Resource requirements over time to enable functions / processes within the organisation to achieve continuity or resumption within the timeframes established as part of the BIA (Recovery Time Objectives). Resources will include:
o staff numbers and key skills;
o vital records and data currency (Recovery Point Objective);
o applications and systems;
o infrastructure (network links);
o facilities (existing and alternate locations);
o suppliers, partners and stakeholders and their inter-dependencies (intra-organisation and external); and
o constraints (such as contractual issues)
* The internal and external threats that could cause a disruption and their probability and impact.
* Prioritisation of the threats (risk levels) according to an agreed formula (high probability and high impact receive high priority)
* The resources required to resume and continue the business activities to support the UNICEF*s objectives and obligations
* A risk management control programme and action plan
Draft Report * 11 weeks after start date
* A comprehensive draft report should be submitted by the end of the eleventh week. A separate report is required for each department. The draft report will be submitted to the Chair of the UNICEF Crisis Management Team for consideration and approval of the CMT. All the questionnaires, survey reports and interview recordings should be submitted with the draft report.
Final Report * 12 weeks after start date
* After incorporating comments provided by the CMT, the consultant will be required to submit the final report, including separate final reports for each HQ department.
KEY QUALIFICATIONS
The Consultant will require:
* Either an Advanced Degree in a related subject area or at least 8 years progressively responsible professional experience in Business Continuity and / or Disaster Recovery and / or Emergency Planning, including research or evaluative work in this area;
* Qualified in Business Continuity Management with extensive experience in conducting BIAs, RAs and CRAs, as well as a track record of implementing BIAs, RAs and CRAs in organisations of comparable scale and complexity;
* Certified and/or accredited by the Business Continuity Institute (BCI) and/or the Disaster Recovery Institute International (DRII);
* Fluent in English with excellent writing skills;
* Proven excellent research skills including the development and application of analytical frameworks and tools and the production of analytical reports on issues and/or performance in Business Continuity;
* Proven excellent interview skills and experience of successfully interfacing with staff at all levels of an organisation.
INSTITUTIONAL ARRANGEMENTS
The consultant will be required to report directly to the UNICEF Business Continuity Manager, who will provide the lead for UNICEF during the consultancy.
Terms and Conditions
Contract type: Individual or Corporate contract
Duration of assignment: 12 weeks
Location: UNICEF Headquarters, New York.
Travel: Office-based, with possibly occasional travel.
How to Apply
Please send a detailed comprehensive CV in English by 7 February 2011 to wsmith@unicef.org
In your response please state your inclusive cost for completing the requirements of the contract.
The Organization does not sponsor for the H1 Visa.
Applications must be received by 7 February 2011. Only candidates who are shortlisted will be contacted.
Post a Comment