JP2004288109A - Business continuity plan formulation support system and business continuity plan formulation support program - Google Patents

Abstract

An object of the present invention is to provide a system that enables even a person who has only general knowledge about a business continuity plan and a target company to easily obtain a draft of a business continuity plan suitable for the business situation of the company.
A BCP template DB group for storing template files of business continuity plans classified according to a combination of business types of business and execution business, and a business name included in each type of business are stored for each type of business. A business pattern DB 22 and a selection form 32 in which a plurality of businesses in a specific business are listed are displayed on a display, and a means for prompting the user to select an execution business of the target company and a combination of the selected business A means for specifying a category within a business category to which the company belongs; a means for specifying CCP which is an indispensable business for the survival of the company based on the category and the execution work; A business continuity plan formulation support system 10 comprising means for extracting a template file suitable for a target company.
[Selection diagram] Fig. 1

Description

∴第１週〜第１２週までの損害額＝約７億８００万円・・・▲１▼
つぎに、仮定４により毎週１０％ずつ個人顧客が減少するのであるから、１２週間の営業停止であればほぼ全ての顧客が離れることになる。
また、仮定５により、その間の損害額は、
８億円×７０％＝５億６千万円・・・▲２▼
結局、ＮＲＩ証券が機能停止に陥った場合、▲１▼と▲２▼の合計金額である１２億６千８００万円の被害総額となるものと推定される。
【００３９】
以上の結果、被害額算定処理部１６によってＮＲＩ証券の被害額が算定されると、ＢＣＰ雛型抽出処理部１８によってＢＣＰ雛型ファイルの抽出が実行される。
すなわち、ＢＣＰ雛型データベース群２８には、図８に示すように、各業種におけるカテゴリ別の雛形データベースが複数格納されており、まずＢＣＰ雛形抽出部１８はＮＲＩ証券のカテゴリに対応した「ＤＢ１１０」を選択する（Ｓ２８）。
つぎにＢＣＰ雛形抽出部１８は、図９に示すように、ＮＲＩ証券のＣＣＰの組合せ及び被害総額（１億円以上）をキーとして同データベース中から特定の雛型ファイル「ＢＣＰ２００」を抽出し（Ｓ３０）、クライアントＰＣ３０に送信する。
この雛型ファイルのタイトルをユーザがクリックすると、対応のアプリケーションプログラムが起動し、その内容がディスプレイに表示される（Ｓ３２）。
【００４０】
このＢＣＰ雛型ファイルには、典型的な「顧客取次専業Ｓｉｍｐｌｅ型」でＣＣＰが「通常商品売取次業務」、「対顧客受渡業務」、「インターネット取引業務」、被害総額が「１億円以上」である証券会社向けの事業継続プランが記述されている。
例えば、以下のような目次が設定されており、それぞれの見出項目について内容が詳細に記述されている。

【００４１】
ＢＣＰ雛形ファイルには、ＣＣＰに重点をおいた記述のみならず、他の業務についての対策、あるいは緊急時における一般的な心構えや注意事項等についても記述されている。
このＢＣＰ雛形ファイル中の記述に対し、主語を対象企業名に置換するなど最小限の修正を加えることにより、そのままＮＲＩ証券の事業継続プランとして流用することも可能であるが、企業の担当者や経営陣に対するインタビューを実施し、企業の実態に合わせて細部の記載を調整することが望ましい。
【００４２】
また、そのインタビューを通じて、当該企業のＣＣＰを再設定する必要が生じる場合もある。例えば、ＮＲＩ証券の経営陣にＢＣＰ２００の雛形ファイルをベースにした事業継続プランの叩き台を諮ったところ、「ＮＲＩ証券はインターネット証券であるため、売り注文のみをＣＣＰとする妥当性は低い。売買共にＣＣＰである」との指摘を受けたとする。この場合、ＢＣＰ雛形ファイルの再検索を実施し、「通常商品買取次」にＹｅｓが設定されている「ＢＣＰ１００」を選択し直すこととなる（図９参照）。
【００４３】
このシステム１０の場合、想定被害額の多寡によって講ずべき対策の内容も異なるという前提に立ち、被害総額に基づくインデックスを各ＢＣＰ雛形ファイルに設定しておき、これを抽出時のキーとして利用している。
しかしながら、被害総額を度外視し、ＣＣＰの組み合わせのみに基づいてＢＣＰ雛形ファイルを抽出するように運用することもできる。
【００４４】
このシステム１０にあっては、各種の設定やデータベースを常にアップデートしていくことが望ましい。
例えば、業種毎の業務設定の妥当性や、カテゴリ毎に設定されたＣＣＰ候補群の妥当性、被害額算定基準の妥当性等について、システム１０の運用を通じて得られたデータを基に再検討することにより、ＢＣＰ雛形ファイルの適合度を向上させることができる。
もちろん、ＢＣＰ雛形ファイルの記述内容自体も適時加筆修正が施される。
【００４５】
上記にあっては、ネットワーク接続されたサーバ１２とクライアントＰＣ３０からなるシステム構成を前提に説明したが、専用のアプリケーションプログラムをセットアップしたコンピュータによるスタンドアロンの環境下でも実現できることはいうまでもない。
【００４６】
【発明の効果】
この発明に係る事業継続プラン策定支援システム及び支援プログラムによれば、事業継続プランや対象企業の活動実態、業界事情等について深い知識を有しないユーザであっても、対象企業が現に実施している業務名を選択するだけでその業務内容に適合した事業継続プランの雛型ファイルを取得することが可能となる。
このため、この雛型ファイルに必要最小限の修正を加えることにより、対象企業の事業継続プランを簡易迅速に策定することが可能となる。
【図面の簡単な説明】
【図１】この発明に係る事業継続プラン策定支援システムの機能構成を示すブロック図である。
【図２】このシステムを用いて特定企業のビジネス継続プランを策定する際の処理手順を示すフローチャートである。
【図３】企業属性データベースに格納された属性情報の一例を示すチャートである。
【図４】執行業務選択フォームの一例を示すレイアウト図である。
【図５】証券業における業種内カテゴリを特定する際の判断基準を示すチャートである。
【図６】カテゴリ毎にＣＣＰ候補を設定する際の検討項目を示すチャートである。
【図７】システム関連の設問フォームの一例を示すレイアウト図である。
【図８】ＢＣＰ雛型データベース群に各業種におけるカテゴリ別の雛形データベースが複数格納されている様子を示す概念図である。
【図９】カテゴリ別の雛形データベース内に複数の雛型ファイルが格納されている様子を示す概念図である。
【符号の説明】
１０ 事業継続プラン策定支援システム
１２ サーバ
１４ ＣＣＰ選定処理部
１６ 被害額算定処理部
１８ ＢＣＰ雛型抽出処理部
２０ 企業属性データベース
２２ 業務パターンデータベース
２４ システム関連設問データベース
２６ 被害額算定基準データベース
２８ ＢＣＰ雛型データベース群２８
３０ クライアントＰＣ
３２ 執行業務選択フォーム
３４ システム関連の設問フォーム[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a business continuity plan formulation support system and a support program, and more particularly to a technique for simply and quickly presenting a business continuity plan template suitable for the business situation of each company.
[0002]
[Prior art]
In the event that a corporate headquarters building or sales office has stopped functioning due to an earthquake, fire, large-scale terrorism, etc., it is important to resume operations as soon as possible. It is necessary to prepare for emergencies from normal times.
For example, it is necessary to secure an alternative office in an appropriate place, establish a backup system for information systems, or define a code of conduct for employees.
[0003]
In the future era, it is indispensable for companies to survive such measures in the event of an emergency, but what should be prepared and how much should be prepared Recognizing is a difficult task. In particular, in order to take maximum measures within the framework of limited human and material resources, it is important to concentrate on tasks that are absolutely essential to the existence of the company. Companies rarely know exactly what is.
For this reason, as shown in Non-Patent Document 1, a consulting service that supports creation of a business continuity plan in an emergency has appeared.
[0004]
[Non-patent document 1]
Deloitte Touche Tohmatsu Protopics January-February 2002 Page 3
[Search on March 17, 2003]
Internet URL:
http: // www. tohmatsu. co. jp / publication / bnl / image / 1_2j. pdf
[0005]
[Problems to be solved by the invention]
When these consulting services are requested, experts are dispatched from the consulting company to the requesting company, and interviews are conducted with the staff in each department and the management. In addition, necessary materials will be collected and browsed, and a platform for business continuity plans will be created. The platform will be presented to the client to hear their opinions, make any necessary corrections, and form a formal business continuity plan.
This business continuity plan describes the size and location of alternative offices to be prepared for emergencies, a backup system for information systems, a method for establishing an internal communication network, employee action manuals, relocation plans, media response manuals, etc. By developing internal systems and conducting employee training and training in accordance with these, ordinary companies will be able to take appropriate emergency measures.
[0006]
However, in order to carry out the above consulting, it is necessary not only to have knowledge of information systems, but also to be familiar with the business contents and actual activities of the company, the circumstances surrounding the industry, etc. At present, there is an absolute shortage of skilled and experienced experts.
For this reason, there was a problem that even if a company wanted consulting, it was difficult to receive services.
Also, even if the consulting service was lucky, there was a problem that the service fee would be high and it would take a long time for the outside expert to formulate a business continuity plan.
[0007]
The present invention has been made to solve the conventional problems described above, and even if a person has only general knowledge of a business continuity plan and a target company, business continuity suitable for the business situation of the relevant company is required. It is an object of the present invention to provide a system that can easily obtain a draft plan.
[0008]
[Means for Solving the Problems]
In order to achieve the above object, a business continuity plan formulation support system according to claim 1 stores a template file of a business continuity plan classified according to a combination of business types of business and execution business. And a business pattern storage unit that stores multiple business names included in each business type for each business type, and displays a selection form listing multiple business types included in a specific business type on a display, and executes the target company. Means for prompting the user to select a task, means for specifying the category within the business category to which the company belongs in accordance with the combination of tasks selected by the user, and means for specifying A means for specifying a CCP, which is an indispensable task, and a template adapted to the target company from the template storage means based on a combination pattern of the CCP. It is characterized by comprising a means for extracting the file.
[0009]
According to this system, even if the user does not have deep knowledge of the business continuity plan, the actual situation of the target company's activities, the industry situation, etc., the business that is suitable for the business content simply by selecting the name of the business that the target company is actually implementing It becomes possible to acquire the template file of the continuation plan.
After that, the template file can be used as a business continuity plan of the target company by making the necessary minimum modifications.
[0010]
The business continuity plan formulation support system described in claim 2 is based on the system described in claim 1, and further, a question for each CCP that inquires about the situation in the target company of the information system required to execute the CCP is described. Means for prompting the user to input an answer on the display, and based on the answer data input by the user, each CCP becomes unexecutable due to malfunction of the information system in the event of an emergency Means for judging whether or not the service is determined not to be unexecutable due to malfunction of the information system from the CCP, and the above-mentioned template based on the remaining CCP combination pattern. Means for extracting a template file suitable for the target company from the storage means.
[0011]
In this way, by examining the relevance to the information system for each CCP, by excluding from the CCP those that do not affect business execution due to the existence of a backup system even if the original information system malfunctions, etc. Thus, it is possible to extract a template file that more closely matches the actual situation of the target company.
[0012]
The business continuity plan formulation support system described in claim 3 is based on the system described in claim 1 or 2. Further, in the template file, an index corresponding to the amount of damage when the CCP cannot be executed is stored. The damage amount calculation standard storage means in which the standard for calculating the amount of damage when the CCP cannot be executed is registered for each category, and the attribute information of the target company is substituted into the above calculation standard. It is characterized by comprising means for calculating the amount of damage and means for extracting a template file suitable for the target company from the template storage means based on the combination pattern of the amount of damage and CCP.
[0013]
As a result, a template file corresponding to the amount of damage caused by the suspension of CCP execution can be extracted, and a business continuity plan more suited to the actual situation of the target company can be formulated.
[0014]
The business continuity plan formulation support program according to claim 4, wherein the computer includes a computer for storing a business continuity plan template file classified according to a combination of business types and execution duties of the company, and each business type. A business pattern storage unit that stores multiple business names for each business type, a user can display a selection form listing multiple businesses included in a specific business type on the display, and select the execution business of the target company Means to identify the category within the industry to which the company belongs in accordance with the combination of tasks selected by the user, and, based on the identified categories and execution tasks, CCP which is essential for the survival of the company. Extracting a template file suitable for the target company from the template storage unit based on the specifying unit and the combination pattern of the CCP. It is characterized in that to function as a step.
[0015]
The business continuity plan formulation support program described in claim 5 is based on the program described in claim 4, and furthermore, a question that asks a computer about a situation in a target company of an information system necessary for executing the CCP is CCP. A means for displaying the form described for each user on the display and prompting the user to enter an answer. Based on the answer data entered by the user, each CCP cannot be executed due to malfunction of the information system in the event of an emergency Means for deciding whether or not to fall into an inoperative state, means for excluding from the CCP those tasks which are determined not to be unexecutable due to malfunction of the information system, and the above-mentioned template based on the remaining CCP combination pattern. It is characterized by functioning as a means for extracting a template file suitable for the target company from the storage means.
[0016]
The business continuity plan formulation support program described in claim 6 is based on the program described in claim 4 or 5, and the template file has an index corresponding to the amount of damage in the event that CCP cannot be executed. Is set, and the computer is used as a damage amount calculation standard storage means in which the standard for calculating the amount of damage when the CCP becomes unexecutable is registered for each category, and the attribute information of the target company is stored in the above calculation standard. It is characterized by functioning as a means for calculating the damage amount by substituting, and as a means for extracting a template file suitable for the target company from the template storage means based on the combination pattern of the damage amount and the CCP candidate.
[0017]
BEST MODE FOR CARRYING OUT THE INVENTION
FIG. 1 is a block diagram showing a functional configuration of a business continuity plan formulation support system 10 according to the present invention. A server 12 serving as a core of the system 10 includes a CCP selection processing unit 14, a damage amount calculation processing unit 16, , A BCP template extraction processing unit 18, a company attribute database 20, a business pattern database 22, a system-related question database 24, a damage amount calculation reference database 26, and a BCP template database group 28.
[0018]
Among these, in the CCP selection processing unit 14, the damage amount calculation processing unit 16, and the BCP template extraction processing unit 18, the CPU of the server 12, which has set up a dedicated application program, executes necessary processing according to the OS and the program. It is realized by doing.
Further, a company attribute database 20, a business pattern database 22, a system-related question database 24, a damage amount calculation reference database 26, and a BCP template database group 28 are stored in the hard disk of the computer.
Of course, it is also possible to configure the server 12 by a plurality of computers connected to each other via a network.
[0019]
“CCP” in the CCP selection processing unit is an abbreviation for Critical Choke Point, and means an important task whose presence or absence has a decisive effect on the survival of the company. However, it is not necessarily a business that directly generates profits, but also includes a business that is indispensable to respond to social demands.
“BCP” in the BCP template extraction processing unit and the BCP template database group is an abbreviation for Business Continuity Plan, which means a business continuity plan.
[0020]
Hereinafter, a processing procedure when a business continuity plan of a certain company is formulated using the system 10 will be described with reference to the flowchart of FIG.
First, the user connects to the server 12 from the client PC 30 via the network, and requests a new business continuity plan.
Upon receiving this, the CCP selection processing unit 14 displays a form for inputting the company name on the display of the client PC 30 and prompts the user to input the target company name (S12).
[0021]
On the other hand, when the user inputs a specific company name, for example, "NRI Securities Co., Ltd.", the CCP selection processing unit 14 extracts the attribute information of the corresponding company from the company attribute database 20 (S14).
As shown in FIG. 3, the attribute information of the company extracted here is general public information such as the type of business, president and CEO, location, capital, and annual sales.
The company attribute database 20 does not necessarily need to be provided in the server 12, but may be configured to access a company information database on the Internet and collect necessary information each time.
Alternatively, a form for inputting company attributes may be displayed on the display of the client PC 30 to request the user to input necessary attribute information.
[0022]
Next, the CCP selection processing unit 14 extracts an execution business selection form for a securities company from the business pattern database 22, and displays the form 32 on the display of the client PC 30 as shown in FIG.
In the selection form 32, the main business contents of the securities company are listed, and the user is requested to select whether or not the target company is performing each business (S16).
On the other hand, the user uses a keyboard or a mouse to selectively input whether or not to perform the operation for each task.
[0023]
On the basis of the information selected by the user, the CCP selection processing unit 14 determines a category for each business pattern of a company in the business type (S18).
In other words, as shown in FIG. 5, the categories of “integrated securities type”, “customer agent specialty simple type”, “customer agent specialty complex type”, and “investment bank similar type” are set in advance for securities companies according to business patterns. It is set, and the category to which it belongs is determined depending on whether or not each business is performed by the target company.
In the case of NRI Securities, the business execution status is as shown in FIG. 4, and when this is applied to the table in FIG. 5, the customer agency specialty Simple type is recognized as the most suitable category.
[0024]
Here, each category is defined as follows.
(1) Integrated securities type:
Plays all the roles expected of a securities firm. Companies referred to as major and semi-major correspond to this.
(2) Customer agency specialized Simple type:
The main business is to handle sales orders of customers. Whether or not to conduct business for individuals or corporations depends on company policies. This includes Internet securities companies for individuals and local securities companies.
(3) Customer agency specialized Complex type:
Derivative securities companies correspond to this. Although it is a corporate partner in principle, it is possible to sell products for individuals directly. Since derivative products are handled, the business flow and system configuration are more complicated than the Simple type.
(4) Investment bank similar type:
Only deals between corporations and traders. Although he claims to be a securities company, his actual business is as close as possible to an investment bank.
[0025]
Since a business candidate to be a CCP is set in each category in advance, a category within the business category of the company is specified as described above, and at the same time, a CCP candidate for the company is determined by the CCP selection processing unit 14. (S20).
By the way, in the case of NRI Securities, which is a customer agency specialized Simple type to which the NRI Securities belong, "Normal merchandise agency business", "Customer delivery business", "Internet transaction business" for individuals and "Normal merchandise agency business for corporations" And "Customer delivery business" are set as CCP candidates, but NRI Securities does not conduct business for corporations, so (1) "Normal merchandise sales business" and (2) " 3) “Customer delivery business” and (3) “Internet transaction business” are certified as CCP candidates.
[0026]
These CCP candidates are basically set in advance for each category from the viewpoint of whether or not a certain task is important to the company and the society. The items to be considered in setting the CCP candidates will be described below.
First, as shown in FIG. 6, information relating to “social demands (high, medium, low)”, “substitutability in other places”, and “separation status of system equipment” for each task is previously written on a chart. (For convenience of illustration, FIG. 6 shows only the general securities type and the customer agency special type Simple type, but charts are actually created for all categories.)
[0027]
Here, the “social request” is evaluated based on the degree of impact on society and the magnitude of requests from authorities when the business is stopped.
"Substitutability in other places" means whether a system that allows the head office or other branch offices to immediately execute business when the department performing the business stops functioning is generally prepared. Or mean.
The “separation status of system equipment” means whether or not a department performing the task and system equipment required for performing the task are physically separated.
[0028]
In the chart of FIG. 6, the tasks whose social demands are “low” or “medium” are excluded from the CCP candidates without considering the possibility of substitution in other places or the state of separation of system equipment.
In addition, even if the social demand is “high”, the work whose substitutability in another place is “possible” and the separation status of the system equipment is “complete separation” is also excluded from the CCP candidates. Although these tasks are important, even if an emergency occurs, it will not be a fatal blow and it will be possible to continue the task.
On the other hand, if the social demand is “high”, the substitutability in other places is “impossible” and the separation status of the system equipment is “insufficient separation”. You.
The problem is the handling when the social demand is “high” and the possibility of substitution in other places and the separation of system equipment is “by the company”. You.
[0029]
In the business content items shown in Fig. 6, "Normal merchandise sales agent" is changed to "Normal merchandise sales agent" and "Normal merchandise sales agent", and "Derived goods sales agent" is changed to It is subdivided into “Derived product purchase agency” and “Derived product sale agency” for the following reasons.
In other words, in securities trading, "losing a sale" has a greater actual loss than "overbuying", and buying can be done by another securities company, but in-kind sales orders are generally held unless physical stocks are brought in. Since it cannot be executed except by securities companies that hold securities in custody, there is little social demand for selling and buying.
Therefore, it is appropriate to separately consider the sales-related business and the purchase-related business when narrowing down the CCP candidates, even if the business is provided integrally in the actual execution situation.
[0030]
The chart of FIG. 6 illustrates only the examination process when narrowing down CCP candidates related to the securities business, and it goes without saying that other charts are used when examining CCP candidates for other industries.
At that time, the elements of "social demand" are more important in industries with high publicity such as banks, railways, transportation, insurance, etc., whereas in the case of industries with low publicity such as convenience stores and home electronics mass retailers, "Social demands" are relatively low.
[0031]
Next, the CCP selection processing unit 14 extracts a system-related question form from the system-related question database 24, and displays the form 34 on the display of the client PC 30 as shown in FIG. The user is asked to select and input an answer for each CCP candidate (S22).
When the user responds, the CCP selection processing unit 14 determines the CCP according to the response data (S24).
Here, the greater the number of answers to No for each selection item, the higher the risk that the execution of business is delayed due to a system failure when the department in charge of the business is damaged, and conversely, The greater the number of answers, the higher the possibility that the system will not be damaged even if the department concerned is damaged, and that the job can be performed as long as the personnel are treated.
[0032]
For example, if the answer to the question "Is the department in charge and the system in different places?" Is Yes, the system is safe even if the building containing the department becomes unavailable.
If the answer to the question “Is the minimum amount of work possible without a system?” Is Yes, it means that even if the system goes down, it can be recovered by relocation.
If “Are there spare devices in a completely different place?” Is “Yes”, it means that even if the system of the department in charge goes down, it is possible to immediately perform the task using the spare devices.
Further, if “Store backup in a completely different location?” Is Yes, it means that at least backup data is secured even if the department in charge is physically lost.
[0033]
The questions listed here are merely examples, and other questions about the relationship between the CCP candidate and the information system can be set.
Further, the “system” as used herein means only an information system necessary for performing the business, and is not limited to a business-related core system, but is also an electronic mail system, a file sharing system, an electronic bulletin board system, a web system. Etc. are also included.
[0034]
When the user inputs “Yes” for all the above questions, the CCP selection processing unit 14 excludes the task from the CCP candidate group. This is because sufficient allowance has already been made for the information system for this task, and it is expected that the task can be resumed immediately even in the event of an emergency.
If No is checked for all questions, the task is maintained as a CCP because there is a high risk of a system failure occurring in the event of an emergency.
[0035]
In the case where answers of Yes and No are mixed, it is determined according to the content of the question.
For example, if any of “Is the department in charge and the system in different places?”, “Minimum business without the system?”, Or “Are there spare equipment in a completely different place?” Even if it occurs and the original information system stops functioning, this does not cause the CCP itself to become unexecutable, so even if the answer to other questions is No, the task is excluded from the CCP candidates Is done.
On the other hand, if only “Store backup in a completely different location?” Is Yes, it is maintained as a CCP candidate.
As shown in the figure, in the case of NRI Securities, only “Store backup in a completely different place?” Is Yes and all other questions are No. Therefore, “Normal merchandise sales business”, “Customer delivery business”, The CCP selection processing unit 14 recognizes three services of “Internet transaction services” as CCP.
[0036]
Next, the damage amount calculation processing unit 16 refers to the damage amount calculation standard database 26, and calculates the damage amount when the CCP of the NRI Securities has stopped functioning (S26).
In the damage amount calculation standard database 26, calculation standards (calculation programs) for calculating the amount of damage for each category in each industry are stored in advance, and the damage amount is calculated by substituting the attribute information of the company into this. Is calculated.
[0037]
The above calculation program complies with certain assumptions, and does not always accurately calculate the actual damage amount, but can derive an estimate of the damage amount.
An example of the assumption in the “customer agency specialized simple type” of the securities business is shown below.
Assumption 1: It takes on average 3 months to arrange a new office and resume securities business
Assumption 2: The amount of damage per day is the operating profit divided by the number of business days
Assumption 3: If the suspension period exceeds one week, the amount of damage per day increases by 20% every week
Assumption 4: If the suspension period exceeds one week, customers decrease by 10% every week
Assumption 5: If the suspension period exceeds one month, it takes one year to return to the original number of customers, during which the profit remains at the current 30%
[0038]
In the case of NRI Securities, the operating profit was 800 million yen in the previous year (see Figure 3), so the daily damage amount is "800 million yen / number of business days (220 days) = approximately 3.67 million yen" (assumed) 2).
Next, based on Assumption 1 and Assumption 3, the damage amount when the business is suspended for three months is calculated as follows.

損害 Amount of damage from the first week to the twelfth week = about 708 million yen ・ ・ ・ ▲ 1 ▼
Next, since the number of individual customers decreases by 10% every week according to the assumption 4, almost all customers will be separated if the business is suspended for 12 weeks.
According to Assumption 5, the amount of damage during that time is
800 million yen x 70% = 560 million yen ... -2
Eventually, it is estimated that the total amount of damage of 1,268 million yen, which is the sum of (1) and (2), when NRI Securities is out of function.
[0039]
As a result, when the damage amount of the NRI securities is calculated by the damage amount calculation processing section 16, the BCP template file is extracted by the BCP template extraction processing section 18.
That is, as shown in FIG. 8, the BCP template database group 28 stores a plurality of template databases by category in each type of business, and the BCP template extraction unit 18 first stores the "DB 110" Is selected (S28).
Next, as shown in FIG. 9, the BCP template extraction unit 18 extracts a specific template file “BCP200” from the database using the combination of the CCP of NRI Securities and the total damage (100 million yen or more) as a key ( S30), transmitting to the client PC 30.
When the user clicks the title of the template file, the corresponding application program is started, and the content is displayed on the display (S32).
[0040]
This BCP template file contains a typical “customer agency specialty simple type” and CCP “normal product sales agency”, “customer delivery”, “internet transaction”, and total damage of “100 million yen or more”. "Is a business continuity plan for securities companies.
For example, the following table of contents is set, and the contents of each entry item are described in detail.

[0041]
In the BCP template file, not only a description focusing on the CCP, but also countermeasures for other tasks or general attitudes and precautions in an emergency are described.
The description in this BCP template file can be used as it is as a business continuity plan of NRI Securities by making minimal modifications such as replacing the subject with the name of the target company. It is advisable to conduct an interview with management and adjust the details in accordance with the actual situation of the company.
[0042]
Also, through the interview, it may be necessary to reset the CCP of the company. For example, when consulting the management of NRI Securities on the basis of a business continuity plan based on the template file of BCP200, "NRI Securities is Internet securities, so it is not appropriate to use only sell orders as CCP. CCP. " In this case, the BCP template file is searched again, and “BCP100” for which “Yes” is set in “Normal merchandise purchase order” is selected again (see FIG. 9).
[0043]
In the case of this system 10, on the premise that the content of measures to be taken differs depending on the amount of expected damage, an index based on the total amount of damage is set in each BCP template file, and this is used as a key at the time of extraction. I have.
However, it is also possible to operate such that the total amount of damage is ignored and the BCP template file is extracted based only on the combination of CCPs.
[0044]
In this system 10, it is desirable to constantly update various settings and databases.
For example, the validity of the business setting for each type of business, the validity of the CCP candidate group set for each category, the validity of the damage amount calculation standard, and the like are reviewed based on the data obtained through the operation of the system 10. As a result, the matching degree of the BCP template file can be improved.
Of course, the description content itself of the BCP template file is also modified as needed.
[0045]
In the above description, the system configuration including the server 12 and the client PC 30 connected to the network has been described. However, it is needless to say that the present invention can be realized in a stand-alone environment by a computer in which a dedicated application program is set up.
[0046]
【The invention's effect】
According to the business continuity plan formulation support system and the support program according to the present invention, even if the user does not have a deep knowledge of the business continuity plan, the activity of the target company, the industry situation, etc., the target company is actually implementing it. By simply selecting a business name, a business continuity plan template file suitable for the business content can be obtained.
For this reason, it is possible to easily and quickly formulate the business continuity plan of the target company by making the minimum necessary modifications to the template file.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a functional configuration of a business continuity plan formulation support system according to the present invention.
FIG. 2 is a flowchart showing a processing procedure when formulating a business continuity plan of a specific company using this system.
FIG. 3 is a chart showing an example of attribute information stored in a company attribute database.
FIG. 4 is a layout diagram illustrating an example of an execution work selection form.
FIG. 5 is a chart showing a criterion for specifying an intra-industry category in the securities business.
FIG. 6 is a chart showing examination items when setting a CCP candidate for each category.
FIG. 7 is a layout diagram illustrating an example of a system-related question form.
FIG. 8 is a conceptual diagram showing a state in which a plurality of template databases for each category in each industry are stored in a BCP template database group.
FIG. 9 is a conceptual diagram showing a state where a plurality of template files are stored in a template database for each category.
[Explanation of symbols]
10 Business continuity plan formulation support system
12 servers
14 CCP selection processing unit
16 Damage calculation section
18 BCP template extraction processing unit
20 Company attribute database
22 Business pattern database
24 System related question database
26 Damage calculation standard database
28 BCP template database group 28
30 Client PC
32 Execution work selection form
34 System related question form

Claims (6)

Template storage means for storing template files of business continuity plans categorized by business type of business and combination pattern of execution work;
Business pattern storage means for storing a plurality of business names included in each business type for each business type;
Means for displaying on a display a selection form listing a plurality of tasks included in a specific industry, and prompting the user to select an execution task of the target company;
Means for identifying the category within the business category to which the company belongs according to the combination of tasks selected by the user;
Means for identifying critical choke points (“CCP”), which are essential to the survival of the company, based on the identified categories and execution operations;
Means for extracting a template file suitable for the target company from the template storage means based on the combination pattern of the CCP;
Business continuity plan formulation support system characterized by the following. Means for inquiring about the situation in the target company of the information system necessary for executing the CCP, displaying a form in which a question described for each CCP is described on a display, and prompting a user to input an answer;
Means for determining whether each CCP is unenforceable due to malfunction of the information system in the event of an emergency, based on the answer data input by the user;
Means for excluding, from the CCP, tasks determined not to be unexecutable due to malfunction of the information system;
Means for extracting a template file suitable for the target company from the template storage means based on the remaining CCP combination pattern;
The business continuity plan formulation support system according to claim 1, further comprising: In the above template file, an index corresponding to the amount of damage when the CCP becomes unexecutable is set,
Damage amount calculation standard storage means in which standards for calculating the amount of damage when the CCP becomes unexecutable are registered for each category;
Means for calculating the amount of damage by substituting the attribute information of the target company into the above calculation standard;
Means for extracting a template file suitable for the target company from the template storage means based on the combination pattern of the damage amount and the CCP;
The business continuity plan formulation support system according to claim 1 or 2, further comprising: Computer
Template storage means for storing template files of business continuity plans categorized according to the type of business of the company and the combination pattern of execution duties,
Business pattern storage means for storing a plurality of business names included in each business type for each business type,
A means for displaying a selection form listing a plurality of businesses included in a specific business type on a display and prompting a user to select an execution business of the target company;
Means for identifying the category within the business category to which the company belongs, according to the combination of tasks selected by the user,
A means to identify CCPs, which are essential to the survival of the company, based on the identified categories and execution operations,
Means for extracting a template file suitable for the target company from the template storage means based on the combination pattern of the CCP;
A business continuity plan formulation support program characterized by functioning as a business continuity plan. Computer
Means for displaying on a display a form in which a question asking about the situation in the target company of the information system required for executing the CCP is displayed for each CCP, and prompting the user to input an answer;
Means for determining whether each CCP is unenforceable due to malfunction of the information system in the event of an emergency, based on the answer data entered by the user;
Means for excluding from the CCP those tasks that are determined not to be unexecutable due to the malfunction of the information system,
Means for extracting a template file suitable for the target company from the template storage means based on the remaining CCP combination pattern;
The business continuity plan formulation support program according to claim 4, wherein the program is made to function as a business continuity plan. In the above template file, an index corresponding to the amount of damage when the CCP becomes unexecutable is set,
Computer
Damage amount calculation standard storage means in which the standard for calculating the amount of damage when the CCP becomes unexecutable is registered for each category,
Means for calculating the amount of damage by substituting the attribute information of the target company into the above calculation criteria,
Means for extracting a template file suitable for the target company from the template storage means based on the combination pattern of the damage amount and the CCP candidate;
The business continuity plan formulation support program according to claim 4 or 5, wherein the program is made to function.

Images