|
Business Continuity Plan Development:
Refers to using the information collected in the BIA to develop the actual business continuity plan.
This includes the areas of plan implementation, plan testing and ongoing plan maintenance.
Two main steps -
- Defining the continuity strategy:
How the business is supposed to manage a disaster disruption.
- Documenting the continuity strategy:
Creation of documentation for the results.
Plan Approval and Implementation:
Involves getting the final senior management sign-off, creating enterprise-wide awareness of the plan and implementing a maintenance procedure for updating the plan as needed.
DRP / Disaster Recovery Planning
Is a comprehensive statement of consistent actions to be taken before, during and after a disruptive event that causes a significant loss of information systems resources.
The primary objective is to provide the capability to implement critical processes at an alternate site and return to the primary site and normal processing within a time frame that minimizes the loss to the organization, by executing rapid recovery procedures.
Disaster planning process phases:
- Data Processing Continuity Planning
- Data Recovery Plan Maintenance
Data Processing Continuity Planning:
Common alternative processing types -
- Mutual aid agreements / Reciprocal agreements:
Is an arrangement with another company that may have similar computing needs.
Advantages is low cost
Disadvantages is that it is highly unlikely that each organization's infrastructure will have the extra capacity to enable full operational processing during the event.
- Subscription services:
- Hot site:
Is a fully configured computer facility with electrical power, heating, ventilation and air conditioning (HVAC) and functioning file/printer servers and workstations.
Advantage is a 24/7 availability.
Disadvantage is that it is expensive, the service provider might oversell capacity, security exposure when information is stored in two places and may be administrative resource intensive when controls must be implemented twice.
- Warm site
Is a facility readily available with electrical power and HVAC and computers, but the applications may not be installed.
Advantages is that costs is less than a hot site, more flexible in the choice of site (location) and less administrative resources than a warm site
Disadvantage is the difference in amount of time and effort it will take to start production processing at the new site.
|
|
