Creating the Capability for Business Continuity
The course looks at Creating the Capability for Business Comtinuity
You Will Learn To
- Create the capability to survive business threatening disasters.
- Create and deeply an emergency response team plus supporting command center.
- Prioritise key business capabilities and prerequisite infrastructure.
- Write a Business Continuity Plan.
Control creation of the continuity plan as a project.
- Standard Full Course 4 Days
- 0900 to 1630 formal class hours
- 1630 onward informal/ optional time for discussion of “topics raised on the day” and demonstration of relevant software tools if wanted
- 1530 finish on last day.
The majority of businesses that experience a disaster fail within 2 years. Equally those with too rigid a recovery plan are as poorly prepared as those with none or an out dated plan.
Find the best balance for being safe rather than sorry.
Who Should Attend
Anyone & everyone charged with responsibility to create, review, maintain or replace the provision made for continuity of operations within a business.
Content & Workshops
Introduction and Overview
Course Objectives, Course Contents, Exercise: Personal Goals.
Introduction to Disaster Recovery Planning
DRP for the Enterprise, Disaster Recovery Planning Overview, Definitions, Why Plan?, Obligations, Data Protection Act, Seventh Principle, DRP for the Enterprise, Stakeholders, It Did Happen to Us.
Assessing Risks in DRP
DRP for the Enterprise, Threats vs. Risks, Dimensions of Risk, Assessing Risks, The Risk Process Steps, How to Collect Risk Data, Classification of Threats, Assets That Can Be Threatened, Sources of Man-Made Threats, Back@Work Exercise: Types of Threat, Impact of Threats, Identifying Exposure to Threats: Identifying Our Risks, Risk Analysis Methods, Qualitative Methods, Quantitative Methods, Back@Work Exercise: Define a Scale of Impacts for CCC’s Threats, CRAMM, NIST Contingency Planning Guides, Courtney’s Method, Frequency and Loss, Risk Matrix, Risk Matrix: Axis, Documenting Risks: Risk Assessment Template, Back@Work Exercise: Identify CCC’s Risks, Risk: Final Thoughts.
Back@Work Exercise: Fire, DRP for the Enterprise, What Do We See and What Do We Do?, When to Create Avoidance Capability, Disaster Avoidance by Design.
Disaster Avoidance by Design (External Threats), Design Considerations (Internal and External Threats), Back@Work Exercise: Proposed Disaster Avoidance Measures for CCC’s Threats.
Business Impact Assessment
DRP for the Enterprise, Purpose of Business Impact Assessment (BIA), The BIA Process, Membership of BIA Team, Who Contributes to BIA?, BIA Detailed and Local Knowledge, Business Impact Assessment, Gathering BIA Data, BIA Questionnaires, BIA Interviews, BIA Workshops, Business Perspective of BIA, IT Perspective of BIA, Recovery Plan Document—By When?, Rating the Importance of Processes and Applications, Back@Work Exercise 4 and 5: CCC’s Business Impact Assessment and CCC’s IT Impact Assessment.
Transition: Threat Assessment to Solution Design
What Is a Disaster Recovery Plan?, DRP for the Enterprise, Course Checkpoint, DR Plan Contents, DR Plan Functions as a User Manual.
Establishing a DR Standby Site
DRP for the Enterprise, DR Standby Sites: The Alternatives, Hot Standby, Cold, Warm, and Mobile Solutions, Other Solutions, DR Standby Sites: Commercial Options, Using a Third-Party Supplier, DR Standby Sites: Making the Selection , Where Do Costs Accrue?, Guidelines for Supplier Selection, DR Is Just a Part of Business Continuity , Workshop (Optional): Contingency Options, DRP for the Enterprise, Sizing Needs, DR Characteristics of Technical Environments, Documenting Contingency Arrangements.
Designing Recovery Strategies
DRP for the Enterprise, Defining the IT Recovery Strategy, Recovery Time and Point Objective (RTO and RPO), Backup Window, Information Lifecycle Management, Tiered Storage, Vital Records, Record Storage, Document the Backup and Restore Process, Typical IT Restore Requirements, Backup, Backup Dimensions, Traditional Backup Strategies, Alternate Methods, Backup Avoidance, Nonstop and High-Availability (HA) Solutions, Virtualization, Returning to Normal Operations, Backup Strategies, Back@Work Exercise 8 (Optional): Design CCC’s Vital Record Storage Strategy.
Recovering Users’ Access to Services
Reconnected Components, Total Desktop Requirement, Third-Party Network Services, Single Point of Failure vs. Redundancy, Removing Network Single Point of Failure (SPF), Data: Impact of Network Loss, Network Reconfiguration , Network Fail over Who Are the Users?, End-User Requirements, Retrieving Critical Resources, How Do Users Access Services?, Remote Access.
Project Management Approach to DRP
Following a Project Approach, Stakeholders: In Making Plans, Assess Stakeholder Significance, Stakeholder Map, Stakeholders’ Stakeholders, Establish Objectives and Obtain Funding, Justification of Funding, Define Roles and Responsibilities, Project Roles: Operations Management and Staff, Resourcing the DR Project, Typical Work, Assess Dependencies, Estimate Time, Schedule the Work, Scheduling Around Constraints, Execute and Track Achievement, Handle Risks and Issues, Test Deliverable’s Back@Work Exercise 9 (Optional): Create a Draft DRP Project Plan.
DRP for the Enterprise, Why Test the Plan?, Testing the Plan: Process, Incremental Approach, Scenarios, Preparation, Minimizing Disruption to BAU, Test Results.
Responding When Disaster Strikes: Teams and Communications
Responding When Disaster Strikes, Recovery Plan: Who Does It?, Recovery Plan: Reactions and Activities, Recovery Plan: Resources, Recovery Plan: By When?, Invocation Decision, Emergency Response, Recovery Plan: Recovering Business Applications, Effect of Time on Application Priority, Setting Priority, Crisis Management Communications Plan (CMCP), Creating the Communications Plan, Information Gap, Crisis Communication Content, Controlling Communications, Back@Work Exercise 10: Create CCC’s DR Team Charters.
When Disaster Strikes: Critical Response
When Disaster Strikes: Critical Response, Recovery Road Map, DR Plan Contents, Back@Work Exercise 11: Create CCC’s DR Team Action Plans, Walk through of DR Plan Template, The Command Center , Immediately Post-Disaster, Returning to Normal Operations: Non-Destructive, Destructive Disaster, Post-Incident Opportunity.
Maintaining the DR Plan
DRP for the Enterprise, Change Control, How Do We Apply Change Control?, Document Management, Document Management: Plan Maintenance, Automated Tools for Supporting BCP, Certification and the PPBCP.
DRP for the Enterprise, Objectives, Threats, and What to Protect , Creating the Fall-Back Solution , Recovery Road Map (Ongoing Need for Non-IT BCP), Maintenance During BAU.