• policy defines how enterprise will maintain OPs in event of disruption/crisis
• preserve key docs
• est. decsion-making authority
• communication
• protect/recover assets
• maintain financial functions
• review/testing
• backups/high availability

1. Initiate process
2. Develop Goals/Objectives
3. Determine Impact
4. Determine Prevention
5. Determine Response
6. Test
7. Update

1. Develop policy
2. Conduct Biz. Analysis
3. ID preventative ctrls
4. Develop recovery strat.
5. Develop IT Contingency plan
6. Plan Test/train/exercises
7. Plan Maintenance

• National Fire Protection Assoc.
• created document NFPA 1600
• standard for planning content NOT planning/process itself

• Natural Hazards earthquakes, tornados, etc
• Human-caused accidental/intentional. accidental file deletion; vandalism, theft, fraud.
• Technology-caused HW/SW malfunction; not obvious

• BCP phase that IDs risks and impact to critical OPs if risks happen
• vulnerability assessments/evals

1. prioritization of crit. processes
2. reduced effeciency
3. estimated tolerable downtime
4. financial loss impact
5. resources needed to restore

1. Ensure health/safety of staff
2. Enable continual operations: property, infrastructure, facilities
3. Maintain continuous goods/services to customers
4. Provide safe workplace environment when disaster occurs

1. Project Plan/Development
2. Data Collection
3. App/Data criticality assessment
4. Data Analysis to assess vulnerabilities, other factors

• activity, that if not recovered, will cause loss and biz failure
• by Sr. Mgt on ACTUAL impact; not just internal policies
• ID Key Personnel

• BIA phase where financial and operational loss impact is ID'd
• Vulnerability tables: strategic tools for completing assessment

• longest period of time outage may occur w/o causing serious biz failures

• point in time, where data recovery begins
• last backup before disaster happens

• time it takes to restore to NORMAL business ops/activities after a disturbance
• time to return to RPO point
• must be achieved before MTD

• ideal 0 (immediate recovery)
• near 0 is $$$$
• need to determine RPO/RTO cost vs loss cost

• BCP implentator/controller
• maintains and updates
• periodict meetings
• ensures BCP available

• Mgmt
• Security
• Business Partner
• Remote Business Assoc
• Company Personnel
• Legal Adviser
• IT Professional

• ID threats/vulner
• Provide Estimates of threats/vuln
• Perform BIA
• Prioritize Recovery efforts
• Determine disaster recovery plans
• Ensure legal req. during DRP execution

• BCP vision/mission statement
• statement of authorization
• roles/respons. of team members
• Plan goals/obj/eval methods
• Applicable laws/regulations/authorities/codes of conduct
• budget
• project schedule
• record mgt practices
  • Document team act.
  • Document act. for due diligence (insurance/audit purposes)

• Coverage of all biz areas
• Threat/Vul ID
• Response Prioritization
• Training
• Testing
• Comm.
• staffing/time allocations
• freq of updates

1. Review Contents
2. Analyze business continuity solution
3. Using Checklists
4. Perf. Walkthrus
5. Parallel Testing test @ alt. site
6. Conducting Simulations exercised, not actual test
7. Full Interruption Testing mimics actual business disruption

• Annual review
• Update baed on eval/tests
• Update for dept. changes

1. Notify Stakeholders (staff/partners)
2. Begin Continuity Operations
3. Assess Level of Impact

• how people/resources are protected in disaster
• how org will recover
• DR team, inventory, procedures, contact info

• Risk People, Places, Things
  • People: safety of people
  • Places: relocation?
  • Things: equipment
• Cost vs Benefits make sure its affordable
• Prioritization what will be recovered first

1. Short rapid response
2. Mid quick response
3. Long
4. Not-required hurricane in San Diego for example

1. Short-term
   • Mirrored Sites
   • Shared Location
2. Long-term
   • Relocation
   • Rebuilding

1. Tape/disk full/incremental/differential
2. Mirrored reproduced on drive in another location
3. Remote Journaling (DB) transactions vs backups;off-site;less $
4. Electronic Vaulting copies sent to another location

1. Full
2. Incremental different versions
3. Differential first full back up, plus last differential backup

1. Hot/mirrored site alt. network setup
2. Warm dormant, non critical site that can be converted into full site
3. Cold predetermined alt location for rebuilding
4. Portable mobile site like van/trailer

Individuals who implement recovery procedures and control recovery operations in the event of disaster or business disruption

• Implement/Control operations
• Provide intermediate/rapid response
• Reach RTO before MTD

• Restore primary team
• clean/repair/salvage/assess
• create plan & obtain budget approval

• evaluate techniques periodically
• maintain on going basis
• BRP techniques

• Checklist/dropbox not as thorough, but cheap
• Offsite Restoration transport to warm site
• Mirrored site cutover cutover to alt site; easiest way

1. Notify Stakeholders
2. Begine ER OPs
3. Assess Damage
4. Assess Facility