Got this summary from www.drj.com. More elaborated version (I think) compared to DRII's.
Reorganized them slightly. Agree? ;)
1. Management commitment to the process.
2. Develop a justification document for management approval for the BCP process.
3. Obtain funding for the BCP effort.
4. Determine if you have in house experience, will you be learning the process, or bringing in an experienced planner.
5. Perform a risk assessment.
6. Select the appropriate software tool (Word based if less than 1000 employees, or consider database if more).
7. Develop a project plan.
8. Perform a Business Impact Assessment (BIA).
9. Develop recovery timelines, or recovery time objectives (RTO).
10. Develop recovery strategy.
11. Document BCP in-scope coverage and out-of-scope.
12. Document assumptions.
13. Identify recovery teams and select the team leaders.
14. Build your team plan templates to include: response, recovery, resumption of business, reconstruction, and relocation back (the 5 “R’s, the first three being your focal point).
15. Address required resource requirements, media spokesperson, call notification process, BCP reporting structure, manual work around processes, critical contacts and numbers, process for declaring a disaster, and damage assessment.
16. Build the team plans, that when all have been completed you will have a BCP.
17. Determine plan distribution,
18. Identify and secure work area recovery for the business units and a hot/warm/cold/mobile location for information technology.
19. Ensure information technology backups and sends those backups to offsite storage.
20. Ensure that business, support, and information technology stores copies of critical documentation offsite.
21. Select and stock a command center
22. Run an exercise on the BCP, a test on the information technology segment, and a drill on the response team.
23. Develop a BCP maintenance schedule.
24. Train existing and new staff members.
25. Ensure that you periodically review the existing hot/warm/cold/mobile location, offsite storage, command center, and work area resources/processes and see if they are still adequate.
26. Remain current on BCP techniques and processes, and become certified at a later date if appropriate.
Reorganized them slightly. Agree? ;)
1. Management commitment to the process.
2. Develop a justification document for management approval for the BCP process.
3. Obtain funding for the BCP effort.
4. Determine if you have in house experience, will you be learning the process, or bringing in an experienced planner.
5. Perform a risk assessment.
6. Select the appropriate software tool (Word based if less than 1000 employees, or consider database if more).
7. Develop a project plan.
8. Perform a Business Impact Assessment (BIA).
9. Develop recovery timelines, or recovery time objectives (RTO).
10. Develop recovery strategy.
11. Document BCP in-scope coverage and out-of-scope.
12. Document assumptions.
13. Identify recovery teams and select the team leaders.
14. Build your team plan templates to include: response, recovery, resumption of business, reconstruction, and relocation back (the 5 “R’s, the first three being your focal point).
15. Address required resource requirements, media spokesperson, call notification process, BCP reporting structure, manual work around processes, critical contacts and numbers, process for declaring a disaster, and damage assessment.
16. Build the team plans, that when all have been completed you will have a BCP.
17. Determine plan distribution,
18. Identify and secure work area recovery for the business units and a hot/warm/cold/mobile location for information technology.
19. Ensure information technology backups and sends those backups to offsite storage.
20. Ensure that business, support, and information technology stores copies of critical documentation offsite.
21. Select and stock a command center
22. Run an exercise on the BCP, a test on the information technology segment, and a drill on the response team.
23. Develop a BCP maintenance schedule.
24. Train existing and new staff members.
25. Ensure that you periodically review the existing hot/warm/cold/mobile location, offsite storage, command center, and work area resources/processes and see if they are still adequate.
26. Remain current on BCP techniques and processes, and become certified at a later date if appropriate.
posted by Unknown | 11:23 PM
0 Comments:
Post a Comment
<< Home