Jefferson College Business Continuity Management Paper Reviews the text on pages 14-19. Examine each of the roles described. What might be the management c

Jefferson College Business Continuity Management Paper Reviews the text on pages 14-19. Examine each of the roles described. What might be the management challenges of getting all these folks on the same sheet? If you were the BC(manager or officer), what kinds of activities would you put into practice on a yearly basis in order to promote a true team spirit based on BC needs? After all, the manager of any enterprise should be its top cheerleader! Use two credible online citations in your response. Use APA format when citing them, of course.

*******

Please see the text in the attachment For your convenience Apress has placed some of the front
matter material after the index. Please use the Bookmarks
and Contents at a Glance links to access them.
Contents
About the Author??????????????????????????????????????????????????????????????????????????????????????????ix
Acknowledgments??????????????????????????????????????????????????????????????????????????????????????????xi
Introduction?????????????????????????????????????????????????????????????????????????????????????????????????? xiii
Part I: Introduction to Business Continuity and Disaster
Recovery??????????????????????????????????????????????????????????????????? 1
Chapter 1:
Business Continuity Management?????????????????????????????????????????? 3
Chapter 2: Essentials of Business Continuity Management???????????????????21
Part II: Plan for Business Continuity and Disaster
Recovery ??????????????????????????????????????????????????????????????? 33
Chapter 3: Getting Started???????????????????????????????????????????????????????????????????????35
Chapter 4:
Planning???????????????????????????????????????????????????????????????????????????????????49
Chapter 5:
IT Disaster Recovery ?????????????????????????????????????????????????????????????57
Chapter 6:
Business Recovery Strategies ???????????????????????????????????????????????81
Chapter 7: Supply Chain???????????????????????????????????????????????????????????????????????????99
Chapter 8: Continuity Suppliers?????????????????????????????????????????????????????????????105
Chapter 9: Education and Awareness ???????????????????????????????????????????????????115
Chapter 10: Governance and Reporting ?????????????????????????????????????????????????123
Part III: Test and Maintain Your Continuity and
Recovery Plans??????????????????????????????????????????????????? 131
Chapter 11: Testing Principles ?????????????????????????????????????????????????????????????????133
Chapter 12: IT Disaster Recovery Testing???????????????????????????????????????????????147
Chapter 13: Business Recovery Testing ???????????????????????????????????????????????????163
Chapter 14: Crisis Management Exercising?????????????????????????????????????????????177
Chapter 15: Maintenance ?????????????????????????????????????????????????????????????????????????191
viii
Contents
Part IV: Execute the Plan????????????????????????????????????????????????? 197
Chapter 16: Manage a Disaster?????????????????????????????????????????????????????????????????199
Chapter 17: Post Event?????????????????????????????????????????????????????????????????????????????215
Part V:
Appendices ????????????????????????????????????????????????????????? 221
Appendix A: Criticality Levels???????????????????????????????????????????????????????????????????223
Appendix B: Roles and Responsibility Matrix???????????????????????????????????????????225
Appendix C: Suggested Business Continuity Management Timetable ???229
Appendix D: Useful Resources and Contacts???????????????????????????????????????????231
Appendix E: Continuity Assessment Questionnaire???????????????????????????????235
Appendix F: Crisis Management Team Roles and Responsibilities ???????247
Appendix G: Call Cascade ?????????????????????????????????????????????????????????????????????????253
Appendix H: Basic Business Continuity Plan Template???????????????????????????255
Appendix I: Business Impact Analysis Questionnaire ???????????????????????????265
Appendix J: Business Continuity Management Standards?????????????????????273
Appendix K: Severity Levels ?????????????????????????????????????????????????????????????????????285
Appendix L: Mapping Severity Levels to Criticalities?????????????????????????????287
Index?????????????????????????????????????????????????????????????????????????????????????????????????????????????289
Introduction
Business continuity and disaster recovery have emerged as critical aspects
of business planning in the past few years. It was born in high-risk and highly
regulated industries but is now spreading rapidly into all sectors and every
type of organization. Why? More and more businesses are affected by natural
and manmade disasters, more regulators expect to see recovery plans in
place for industries beyond health and finance, more organizations expect
to see continuity policies in place at vendor sites, and insurers drop rates for
businesses showing greater awareness of security protocols. More important,
in the age of 24/7 business, customers expect to be able to do business with
you when it’s convenient for them. Never mind that your city just flooded; just
send me my goods or complete my transaction.
Originally, business continuity and recovery planning were the domain of a few
elite consultants. Historically, consultants charged a premium for their skills
and knowledge to organizations. These companies had no choice but to pay
for custom consultancy engagements. Now, with increased need for continuity
planning and more practitioners embedded inside organizations, business
continuity has effectively been commoditized—every business needs to plan
for unexpected events or pay the consequences. This commoditization is a
good thing because organizations need continuity plans in place quickly, at the
lowest cost and with the least pain.
This book covers the key aspects of business continuity and disaster recovery.
It is written so anyone can pick it up, read it, then go and do it. It tells you what
you need to do, gives you simple tools to use, and tells you what questions you
need to ask and from whom you should seek the answers. Just as important,
it provides checklists and templates that will help you put a credible plan in
quick order.
Why Read This Book?
You have a job to do protecting your company from disasters, hackers, supply
problems, and anything else that might keep you from fulfilling your mission.
I want you to learn from my mistakes and quickly acquire the necessary
knowledge to get the job done. I want you to avoid the trial-and-error journey
that my peers and I had to suffer as we learned the hard way.
xiv
Introduction
So if you want to learn all the essential aspects of business continuity while
avoiding the pain, then this book is for you.
There are lots of excellent books that tell you what you’ve got to do. This
book is for people who want to know how to do it.
The aim of this book is to explain (in simple terms) all the key elements of
business continuity and disaster recovery for people who need to:
•
Learn the basics of business continuity fast
•
Get something in place today so they’ll have a chance if
disaster strikes tomorrow
•
Avoid the principal mistakes people in your position often
make
•
Prepare solid plans that people find easy to use and
maintain
•
Identify and fix security and continuity gaps in your systems, processes, or people
•
Test your continuity plans and the people, suppliers, and
technology that your organization depends on
•
Make sure your staff knows what to expect from the
organization if disaster strikes—and what the organization should expect from you
•
Become compliant with the demands of internal auditors,
external regulators, and business partners that expect them
to have solid, demonstrable continuity plans in place
•
Extend the principles of continuity into supplier organizations and business partners so that third parties are able
to meet your needs
•
Keep all the plans, scripts, solutions, and other functions
up to date without making it into a full-time job
If it’s your job to accomplish any of these things, read on. ?This book is for you!
Introduction
Who Should Read This Book
This book is relevant to anyone who is in anyway involved in business continuity,
crisis management, and disaster recovery (DR).
This list includes:
•
Business continuity managers
•
Business continuity coordinators—people who look after
local plans and do the day-to-day administration and testing for their department
•
IT staff and technicians who support business continuity or
DR solutions and are involved in testing or have responsibility for some element of the recovery of their business
•
IT architects and developers who are responsible for
including resilience into their designs and the solutions
they deliver
•
Executives accountable for the continued smooth running
of their businesses, funding business continuity efforts,
and making sure it meets underlying business needs
•
Staff who have a role to play in preparing plans, testing, or
have responsibilities in disaster recovery situation
•
Auditors who are responsible for making sure that the or­gani­
zation’s continuity arrangements meet business needs
•
Suppliers that need to meet their customers’ needs in
regard to business continuity and DR
•
Suppliers that sell business continuity or DR services
Practices to Underpin Frameworks
There are many excellent business continuity management (BCM) frameworks.
BS259991 and AS/NZS 50502 are two good examples. Each sets out what you
have to do and to some extent what you should learn. They also provide
a common vocabulary for you to use. The problem with standards and
frameworks, however, is that in general they don’t tell you how to do anything.
How do you assess a business impact analysis? How do you plan and deliver a
DR test? How do you keep your staff informed? How do you keep your plans
updated?
1
http://en.wikipedia.org/wiki/BS_25999
http://en.wikipedia.org/wiki/Business_continuity
2
xv
xvi
Introduction
In this book, I mean to plug such gaps by sharing my experience and describing
what I and other experienced BC/DR people actually do.
For some people, BCM is an emotive subject; many practitioners are exacting
and fussy in what they do. To be frank, I’m not overly attached to what we do.
Continuity planning is simply something that must be done in our day and age.
But I do care about getting results efficiently and effectively. I also like to do
that without upsetting or distracting too many other people! But it’s possible
to get bogged down in detail and perfectionism. To avoid that, do what I do
and keep your mind on the practical.
For this reason, if you read anything in this book and can think of a better way
of doing things, don’t think badly about me. Instead think, “I should send this
idea to Jamie!”3 Take the time to gather your thoughts and let me know so I
can improve what I do and then improve this book!
Why Listen to Me?
First, I’ve spent most of the past 25 years working in business continuity and
IT disaster recovery–related roles, much of it in the financial services and
banking industry, and should have learned most of what there is to know.
So, what I’m offering you is the chance to exploit my mistakes and gain my
insight in days—not months or years!
One of the key issues I’ve faced, and an issue that will probably concern you
too, is how to deliver business continuity through people who have other
full-time roles that have nothing to do with business continuity—people for
whom business continuity is a pain and a distraction from their main role. If
that describes you, you’ve come to the right book. My overarching goal is to
make your job easier, something I can do by telling you how things play out in
the real world.
When creating a business continuity program, I’ve also come to realize it’s
essential to build it with the following principle in mind:
The program must address the deeper technical issues but without
needing full-time experts to make it work.
In short, I believe my job is to make business continuity simple and suitable for
people who only look at their business continuity/DR plans once or twice a
year. So wherever possible I will aim to demystify business continuity, so that
when people come back to their plans nine months down the line, it’ll be fairly
easy to understand or implement. If you want to learn to make it simple, then
I’m your man.
Reach me through www.bcmdeskreference.com/
3
Introduction
Structure of the Book
The chapters are written so that you can either dip in as you need to or
you can read it section by section. The sections are organized as you should
ideally approach business continuity, so unless you have a specific need it’s best
to read the book in chapter order.
However, if sections or chapters don’t apply—for example, you don’t have any
third-parties contractors—you might want to skip them.
I’ve tried to highlight the relevance of each chapter at the beginning so you can
decide in a few moments if it’s worth reading on.
The book is organized in the following five parts:
•
Part One: Introduction to Business Continuity
and Disaster Recovery. Introduces the basic concepts
and provides you with the who, what, when, where—and
a high-level how—of business continuity, crisis management,
and disaster recovery.
•
PartTwo: Plan for Business Continuity and Disaster
Recovery. Explains how to plan for business continuity.
The section looks at both business continuity plans and
IT disaster recovery plans.
•
Part Three:Test and Maintain Your Continuity and
Recovery Plans. Examines all the testing and maintenance that is relevant to business continuity with chapters on IT testing, business testing, and maintenance.
•
Part Four: Execute the Plan. There’s no point in having plans and solutions if you can’t deploy them at a time
of crisis. This section explains what you need to do to
make sure you steer your organization though whatever
disruption comes your way. More than that, it also covers
the return from contingency to normal operations.
•
Part Five: Appendices. Here you’ll find copies of useful things like checklists, templates, and processes that I
describe in the book. You can use them to get your own
business continuity up and running. The appendices also
include some useful reference information and links to
other useful resources.
Let’s get started!
xvii
P A RT
I
Introduction
to Business
Continuity
and Disaster
Recovery
CHAPTER
1
Business
Continuity
Management
An Overview
In this chapter we introduce the key concepts of business continuity, explain
how an organization should approach business continuity, and explore the
roles that underpin business continuity. Everything covered here will be quite
high level, and all the key themes will be explored in more detail in the subsequent chapters.
What Is Business Continuity Management?
Business continuity management (BCM) exists to avoid any interruptions that
could lead to either significant losses or a failure to achieve the organization’s
principal objectives. BCM is both a process and a discipline.
The sorts of things business continuity exists to deal with are wide ranging,
from the mundane to the most dramatic events, such as from someone leaving the water running to volcanic ash clouds or space weather. The aims of
business continuity vary depending on the nature of the organization and are
as general as keeping the light on and as specific as providing all staff with chargers so that they can use their phones and laptops following a Superstorm
Sandy–type event.
4
Chapter 1 | Business Continuity Management
Business continuity is an umbrella discipline and encompasses some specific
disciplines such as business continuity planning, where you do all the work to
prepare for a disaster; service continuity, where you set up, maintain, and test
the technology solutions that support business continuity; and crisis management, which is the process you will use to respond to major events that your
“business as usual” processes can’t cope with.
KEY POINTS OF …
Purchase answer to see full
attachment