Sustainability Report 2015 29 The Business Continuity reporting dashboard S.No. BCMS Objective BCMS requirement Expectations and objective of measurement Key Performance Indicator Metrics Unit of Measurement Criteria ( C ) Frequency BCMS Performance Review Obj 1, Obj 2 1 Obj 1, Obj 2 Obj 2 Management review The BCM Committee must of the BCMS review the BCMS at least once in a year. BCM Committee members are highly committed to implement and maintain the BCMS Internal/External BCMS internal audit should be Audit conducted at least once a year 2 Obj 2, Obj 4 BIA Update 4 Obj 2 5 Obj 2 6 Obj 2 BC Risk Assessment Update BCP Update BCP Testing Obj 2 7 Obj 2 BCMS Awareness 8 Obj 2, Obj 3 9 Obj 3, Obj 2 10 Obj 2 11 Obj 2 BCMS Awareness BC Risk Treatment BC Testing Business Continuity Plan Effectiveness 12 Obj 2 Suppliers BC capabilities 13 Obj 2 Ensure that Non-Conformities are closed before the next Audit Ensure that the BIAs of all business functions are updated at least once a year Number of Management Review meetings conducted in a year Number of BCM Committee members attending management review meeting*100/Total number of BCM Committee members Number of BCMS internal audits in six months Number of open findings*100 / total number of findings Number of updated BIAs*100/Total Number of BIAs Ensure that the BC Risk Number of Risk Assessment Review Assessment has been reviewed at least once a year Ensure that the BCP document Number of BCP Updates per year is updated at least once a year Ensure that a BC table top test is conducted at least once a year Ensure that a live BC testing is conducted at least once a year % Number % % Number Number Number of BC table top tests done per year Number Number of live BC tests done per year Number Ensure that all BC Teams are trained on their BC roles and responsibilities Number of people who attended BC awareness Sessions*100/ Number of employees who should attend a BC awareness session Ensure that all BC Teams and Number of Failures in properly and staff are aware of their BC roles timely responding to an incident and responsibilities due to lack of staff awareness*100/ Total Number of incidents Keep BC Risks at acceptable Total Number of current risks level above the acceptable level * 100 / Total Number of risks above the acceptable level of last year Ensure that all parties involved Number of Business Functions in the BC plan participate in the who participated in the Test *100/ BC testing Number of Business Functions who should participate in the BC testing Reduce the time of business Number of incidents where the disruption following an time to resume the business took incident. longer than the target time (as per BIA results)*100/Number of disruptive events that happened in the last year (source: Incident logs) Ensure that critical suppliers services are available when required through identifying back up supplier for each critical supplier Ensure that all critical suppliers are assessed for the BC capabilities Number % % % % % Number of Supplier Business Continuity Assessments Completed*100/Total Number of “Critical” Suppliers % 2 3 4 Yearly Yearly Yearly Monthly Yearly Yearly Yearly Yearly Yearly 0% ≤ C ≤70 % Not acceptable 70% < C < 80 % Acceptable C ≥ 80 % Good Yearly C >20% Not acceptable10%≤ C ≤ 20% Acceptable 0%≤ C ≤ 10% Good Yearly C < 70% Not acceptable70% ≤ C < 80% Acceptable 80% ≤ C ≤ 1000% Good Yearly 0% ≤ C ≤ 80% Not acceptable 80% < C ≤ 99 % Acceptable C > 99 % Good Yearly C >20% Not acceptable0%≤ C ≤ 20% Acceptable C=0 Good Yearly 0% ≤ C ≤70 % Not acceptable 70% < C < 80 % Acceptable C ≥ 80 % Good Yearly 0% ≤ C ≤70 % Not acceptable 70% < C < 80 % Acceptable C ≥ 80 % Good Yearly % Number of crtitical Suppliers deemed Single or Sole Source*100/ Total Number of “Critical” Suppliers 1 C=0 Not acceptable C ≥ 1 Acceptable C ≥ 2 Good 0% ≤ C ≤ 50% Not acceptable 50% < C ≤ 80 % Acceptable C > 80 % Good C=0 Not acceptable C ≥ 1 Acceptable C ≥ 2 Good 0% ≤ C ≤ 10 % Good 1% ≤ C ≤ 30 % Acceptable C > 30 % Not Acceptable 0% ≤ C ≤ 80% Not acceptable 80% < C ≤ 99 % Acceptable C > 99 % Good C=0 Not acceptable C ≥ 1 Acceptable C ≥ 2 Good C=0 Not acceptable C ≥ 1 Acceptable C ≥ 2 Good C=0 Not acceptable C ≥ 1 Acceptable C ≥ 2 Good C=0 Not acceptable C ≥ 1 Acceptable C ≥ 2 Good