Please enable JavaScript.

Coggle requires JavaScript to display documents.

15:4(2) (COMPONENTS OF A BUSINESS CONTINUITY PLAN (:one: Business…

- - - - Address mission/business process at lower or expanded level from COOP MEFs
        
        Mission/business process focused plan coordinated to COOP plan to sustain non MEFs :two:
  - - - Info sys addressed based on their support to mission essential functions (MEF)
        
        MEF focused plan
        Activate with BCPs,ISCPs, DRPs :one: :six: :seven:
  - - - Address communication with personnel and public
        
        Incident based often activated with COOP, BCP
        May be used alone during public exposure event :one: :two:
  - - - Address critical infrastructure components
        
        Risk management plan supports COOP plans for organizations with critical infrastructure and key resource assets :two:
  - - - Address mitigation and isolation of affected systems, clean up and minimizing loss of information
        
        Information system focused plan may activate ISCP or DRP :six: :seven:
  - - - Activated after major system disruptions with long term effects
        
        Information system focused plan may activate one or more ISCPs for recovery of individual systems :seven:
  - - - address single IS recovery at current or appropriate alternate location
        
        Information system focused plan may be activated independently or as a part for larger recovery , coordinated with DRP,COOP, BCP :one: :two: :six:
  - - - Focuses on personnel and property particular to specific facility; not mission /information system based
        
        Incident based plan initiated immediately after event preceding COOP or DRP activation :two: :six:
- - - - • Verify the completeness and precision of the BCP.
      - • Evaluate the performance of the personnel involved in the exercise.
      - • Appraise the training and awareness of employees who are not members of a business continuity team.
      - • Evaluate the coordination among the business continuity team and external vendors and suppliers
      - • Measure the ability and capacity of the backup site to perform prescribed processing.
      - • Assess the vital records retrieval capability.
      - • Evaluate the state and quantity of equipment and supplies that have been relocated to the recovery site.
      - • Measure the overall performance of operational and IT processing activities related to maintaining the business entity.
  - - - Test
        
        real action of the business continuity test
        
        Data entry, telephone calls, information systems processing, handling orders, and movement of personnel, equipment and suppliers should take place.
        
        Actual operational activities are executed to test the specific objectives of the BCP
        
        Evaluators review staff members as they perform the designated
        tasks.
        
        the actual test of preparedness to respond to an emergency.
      - pretest
        
        outside the realm of those that would take place in the case of a real emergency
        
        no forewarning of the event and, therefore, no
        time to take preparatory actions
        
        set of actions necessary to set the stage for the actual test
        
        ranges from placing tables in the proper operations recovery area to transporting and installing backup telephone equipment.
      - Posttest
        
        cleanup of group activities
        
        phase comprises such assignments as returning all resources to their proper place, disconnecting equipment, returning personnel, and deleting all company data from thirdparty systems.
        
        includes formally evaluating the
        plan and implementing indicated improvements.
  - - - paper walk-through of the plan
        
        major players in the plan’s execution who reason out what might happen in a particular type of service disruption
        
        walk throughthe entire plan or just a portion
        
        paper test usually precedes the
        preparedness test.
    - - localized version of a full test, wherein actual resources are expended in the simulation of a system crash.
        
        performed regularly on different aspects of the plan and can be a costeffective way to gradually obtain evidence about how good the plan is.
        
        a means to improve the plan in increments
    - - one step away from an actual service
        disruption
        
        should have tested the plan well on paper and locally before endeavoring to completely shut down operations.
        
        purposes of the BCP testing, this is the disaster.
  - - - Elapsed time for completion of prescribed tasks, delivery of equipment, assembly of personnel and arrival at a predetermined site
    - - Amount of work performed at the backup site by clerical personnel and information systems processing operations
    - - number of vital records successfully carried to the backup site versus the required number
      - the number of supplies and equipment
        requested versus actually received
      - number of critical systems successfully recovered can be measured with the number of transactions processed.
    - - Accuracy of the data entry at the recovery site versus normal accuracy (as a percentage)
        
        accuracy of actual processing cycles can be determined by comparing output results with those for the same period processed under normal conditions.
- - - - important step in maintaining a BCP is to update and test it whenever relevant changes take place within the organization.
  - - - For scheduled and unscheduled tests, the coordinator will write evaluations and integrate changes to resolve unsuccessful test results into the BCP within a certain number of days (e.g., 30 days, 2 weeks).
    - - Training dates should be scheduled within 30 days of each plan revision and scheduled plan test.
- - - - usually will be key team leaders responsible for
        contacting the members of their team.
    - - contacts within companies that have been designated to provide supplies and equipment or services
      - contact persons at recovery facilities, including hot-site representatives and predefined network communications rerouting services
      - contact persons at offsite media storage facilities and the
      - contact persons within the company who are authorized to retrieve media from the offsite facility
      - insurance company agents
      - contacts at contract personnel services
      - legal/regulatory/governmental agencies, if
        required
- - - - detailed, up-to-date hard copy procedures
      - contract personnel who are unfamiliar with the standard and
        recovery operations
      - supply of special forms,such as check stock,
        invoice forms and order forms
      - programs and equipment for data entry