Business Continuity

Business Continuity Planning (BCP)

1. The set of controls designed to keep a business running in the face of adversity, whether natural or man-made
2. Continuity of Operations Planning (COOP)

Business Continuity Planning (BCP) (Focus)

1. Keep business operations running
2. Primary control that supports the security objective of Availability

BCP Scope

1. What business activities will the plan cover
2. What systems will it cover
3. What controls will it consider

BCP (Cloud)

Business continuity planning in the cloud requires collaboration between providers and customers.

Business Continuity Controls

1. Redundancy
2. Single Point of Failure Analysis (SPOF)
3. Succession planning

Redundancy

Protects against the failure of a single component

Single Point of Failure Analysis (SPOF)

continues until the cost of addressing risks outweighs the benefit

Succession planning

When someone leaves the organization have a replacement or successor ready for that position.

High Availability

Uses multiple systems to protect against service failure

Fault Tolerance

Makes a single system resilient against technical failures

Load Balancing

1. Spreads demand across systems
2. Different than High Availability (They have different goals)

Common Points of Failure (3)

1. Power Supply
2. Storage media
3. Networking