Chapter 20.3: Planning for Business Continuity

Step 1: Business Impact Analysis

predicts the consequences of disruption of a business function and process and gathers information needed to develop recovery strategies

Step 2: Recovery Strategy

a way to restore operations to a minimum acceptable level following a disruption. may involve contracting with third parties, entering into partnerships or reciprocal agreements, or displacing other activities within the company.

Step 3: Business Continuity Plan Development

Plan development begins with defining the scope, objectives, and assumptions of the business continuity plan. A few of the tasks involved in include: (a) emergency operating center location, (b) company-wide training and exercise rehearsals, (c) types and frequency of alerts and notifications, (d) data restoration plans, (e) people assigned to execute recovery plans, (f) prioritization of processes to activate, (g) identification of the availability of resources needed, such as extra computer servers or trucks, and (g) contact information for all involved.

Step 4: Testing and Exercises

Testing is necessary to determine whether the various parts of the preparedness program will work.