|We would also highly recommend viewing the GAP (Globally Accepted Pracices) document. The GAP document was created by 10 individual sub-committees of seasoned business continuity professionals from partner organizations (ARMA, DRII, FSTC and NFPA) and members from the public and private sectors. The mission of the DRJ-EAB effort is “To be recognized as a leading source of ‘sound’ Generally Accepted Practices by providing a depository of knowledge and recommendations offered by skilled business continuity practitioners.” Here is a link to the GAP Project.|
SUBJECT AREA 1: Project Initiation and Management
Establish the need for Business Continuity Planning (BCP) within a Business Continuity Management (BCM) Process, including resilience strategies, recovery objectives, business continuity and crisis management plans, and including obtaining management support, and organizing and managing the project to initiate the process to completion within agreed upon time and budget limits.
- Business Continuity Planning for the Rest of Us
- The Board of Directors Should Be Involved in a BCP. . .
- Core Principles of BC/DR
SUBJECT AREA 2: Risk Evaluation and Control
Determine the events and external surroundings that can adversely affect the organization and its facilities with disruption as well as disaster, the damage such events can cause, and the controls needed to prevent or minimize the effects of potential loss. Provide cost-benefit analysis to justify investment in controls to mitigate risks.
- Risk Analysis - An Overview
- Impact: How Great Would It Be?
- Contingency Planning... A Cost Versus Benefit Analysis
- Implementing an Enterprise-Wide Security Program
SUBJECT AREA 3: Business Impact Analysis
Identify the impacts resulting from disruptions and disaster scenarios that can affect the organization and techniques that can be used to quantify and qualify such impacts. Establish critical functions, their recovery priorities, and interdependencies so that recovery time objective(s) and recovery point objective(s) can be set.
SUBJET AREA 4: Developing Business Continuity Strategies
Determine and guide the selection of alternative business recovery operating strategies for recovery of business and information technologies within the recovery time objective, while maintaining the organization’s critical functions.
- Which Remote Site Strategy is Best For You?
- Vital Records Protection Issues
- Organizing a Contingency Plan For Success
- How Do You Get Ready For a Disaster? Selecting A Restoration Company
- Manage the Recovery Planning Project Part 1 & 2
SUBJECT AREA 5: Emergency Response and Operations
Develop and implement procedures for response and stabilizing the situation following an incident or event, including establishing and managing an Emergency Operations Center to be used as a command center during the emergency.
- The Triad Alliance "Preparing the Vulnerable Population"
- Securing Disaster Recovery Objectives with Effective Communications
SUBJECT AREA 6: Developing and Implementing Business Continuity Plans
Design, develop, and implement Business Continuity and Crisis Management plans that provides continuity within the recovery time objective and recovery point objective.
- The K.I.S.S. Method to BRP
- Creating Usable Disaster Recovery Documentation
- Establishing a Corporate Business Continuity Program
- Business Continuity Management
SUBJECT AREA 7: Awareness and Training Programs
Prepare a program to create and maintain corporate awareness and enhance the skills required to develop and implement the Business Continuity Management program or process and its supporting activities.
- DR/BC Planning and Employee Awareness
- Enhaning Senior Management Awareness and Gaining Its Commitment to Business Continuity Planning
- Training Your BC Teams
- Business Continuity and Training For All Levels of an Organization
SUBJECT AREA 8: Exercising and Maintaining Business Continuity Plans
Pre-plan and coordinate plan exercises, and evaluate and document plan exercise results. Develop processes to maintain the currency of continuity capabilities and the Plan documents in accordance with the organization’s strategic direction. Verify that the Plans will prove effective by comparison with a suitable standard, and report results in a clear and concise manner.
- How Effective Is Your Response Plan?
- Putting the Plan in Motion: A Checklist
- The Test That Wasn't a Test
- Testing Your Plan
- Full Scale Business DR Testing
SUBJECT AREA 9: Public Relations and Crisis Coordination
Develop, coordinate, evaluate, and exercise plans to communicate with internal stakeholders (employees, corporate management, etc.) external stakeholders (customers, shareholders, vendors, suppliers, etc.) and the media (print, radio, television, Internet, etc.)
SUBJECT AREA 10: Coordination With External Agencies
Establish applicable procedures and policies for coordinating response, continuity, and restoration activities with external agencies (local, state, national, emergency responders, defense, etc.) while ensuring compliance with applicable statutes or regulations.