ENRICHING LIVES EXPANDING HORIZONS - Maxis

238
Corporate Governance
RISK
MANAGEMENT
Continued
MANAGING OPERATIONAL RISKS – BUSINESS CONTINUITY
In addition to the risk management function, Maxis has put in place disaster recovery and business continuity plans which are tested
regularly to ensure prompt recovery of critical business functions in the event of major business or system disruptions. This is carried
out via the establishment of a Crisis Management Team (CMT) to ensure uninterrupted service to our customers in Malaysia. To
preserve shareholder value, Maxis is committed to ensuring the timely recovery of its core business and its continuity in the event of
a disaster at any of its locations. Business Continuity (BC) is of paramount importance to the Company and its focus is maintained
by a dedicated team of certified BC practitioners. Maxis is certified under the British Standard BS 25999 (Business Continuity
Management), therefore key BC disciplines such as risk evaluation, development of BC strategies and infrastructure plus testing of
response plans are in line with international BC best practices.
Annually, company-wide crisis simulation exercises, involving core divisions of operations, are conducted to test the response of the
CMT members. In addition, an average of 50 simulation tests of varying complexity are conducted annually on core divisions and
their respective critical equipment. Ongoing awareness programmes are also conducted for CMT coordinators and staff nationwide.
The progress of these initiatives is reported monthly to Management and presented twice a year to the Business Continuity
Programme Steering Committee which is chaired by the Joint Chief Operating Officer. In addition, key risks are highlighted to the
Audit Committee in conjunction with the ERM process. Where necessary the Group mitigates the risk of high-impact loss events
through appropriate insurance coverage.
BUSINESS CONTINUITY PROCESS FLOW
Phase 1
Programme Justification
and Authorisation
Phase 2
PLAN, DEVELOPMENT, TESTING AND TRAINING
Phase 3
MAINTENANCE
1. PROJECT INITIATION
RISK ASSESSMENT
DEVELOP BCP CAPABILITIES
2. RISK IDENTIFICATION
4. RECOVERY STRATEGIES
RISK AVOIDANCE
RISK REDUCTION
RISK TRANSFER
5. RECOVERY INFRASTRUCTURE
NETWORK FACILITIES
IT INFRASTRUCTURE
OFFICE FACILITIES AND OTHERS
8. TESTING
9. PLAN MAINTENANCE
3. BUSINESS IMPACT
ANALYSIS
6. RESPONSE PLAN
7. AWARENESS/
TRAINING
10. AUDIT REVIEW