Business Continuity and Disaster Recovery Chapter 8 Part 1 Pages 897 to 914

BCP Project Components Business Continuity Coordinator – Oversee BCP and Disaster Recovery plans. BCP Committee – Different departments within the company. – Page 898

Sustainable, long term program BCP Policy Scope Budget Staff Management Support Awareness training Skill training

BCP Project Components Project Management – Table 8-1 on page 903 Planning Requirements – Executive may be held responsible if they did not practice due care and due diligence – Regulations must be abided by In the case of a disaster, confidential customer information must be protected

Business Impact Analysis (BIA) Document the business functions Indicate each functions criticality level – Page 905 Risk Assessment – Vulnerabilities of most time-sensitive resources – Threats and hazards – Measures that cut the length of effect of disruptions

BIA Risk Assessment – Single point of failure – Prioritize the list of threats – Strategy for risk control

Threats Man made – Human mistakes – Disgruntled employees, Strikes – Hackers Natural – Floods, tornadoes Technical – Loss of power, device failure

BIA Assign value to Assets Quantitative or Qualitative Impact – List on page 909

Critical Systems Maximum Tolerable Downtime (MTD) Figure 8-2 on page 910 List on page 910 – Each business function should be put in one of these categories Be prepared for any loss of business resources

BIA Companies are complex – Biggest challenge is understanding all the interdependencies List on page 912 Main goal is to resume normal business as soon as possible, spending the least amount of money and resources.

Preventive Measures List on page 914