Business Continuity Plan Auditing Service

The Vendor is required to provide for provision of business continuity plan (BCP) auditing services.
- Access to lifelong learning is offered through full-time, part-time, and distance programs at certificate, diploma, advanced diploma, undergraduate, and soon, graduate degree levels through its eight schools.
- Audit engagement is to:
•    Determine the adequacy of the current corporate governance structure and coordination of business continuity planning (BCP) for agency operations;
•    Determine if business resumption plans exist and were developed based on a risk analysis to determine the criticality of each operation; and
•    Assess the adequacy of the business continuity plans and processes in place to ensure that critical operations continue and are restored in the event of a significant business disruption.
- An assessment of current BCP capabilities and maturity of the following key processes:
•    Governance and Oversight
•    Establishment of a governance framework to oversee, coordinate, and report on all business continuity activities. 
•    This includes:
•    A clearly defined mandate
•    Assigned roles and responsibilities
•    Compliance with regulatory and institutional requirements
- Ownership and Accountability
•    Each school and department is responsible for developing, maintaining, and testing its own business resumption plan, including:
•    Conducting Business Impact Analyses (BIA)
•    Identifying critical systems, processes, and dependencies
•    Defining recovery strategies and required resources
•    Assigning clear roles and responsibilities for plan execution
- Risk Identification and Assessment
•    The identification and assessment of potential hazards, risks, and vulnerabilities that could impact operations, including:
•    Evaluating the likelihood and impact of disruptive events
•    Understanding any potential interdependencies between schools and departments
- Risk Mitigation and Preparedness
•    Proactive planning to reduce risk exposure and enhance preparedness, including:
•    Implementing risk mitigation strategies
•    Managing residual risks
•    Preparing for incident response through training and readiness activities.

- Questions/Inquires Deadline: September 18, 2025