Ch 8: Business Continuity Planning

Recap (EA)
An enterprise architecture (EA) is a conceptual blueprint that defines
the structure and operation of an organization. The intent of an enterprise
architecture is to determine how an organization can most effectively
achieve its current and future objectives.
Enterprise architecture contains four points-of-view, called the business
perspective, the application perspective, the information perspective, and
the technology perspective.
 The business perspective defines the processes and standards by
which the business operates on a day-to-day basis.
 The application perspective defines the interactions among the
processes and standards used by the organization.
 Recap
 The information perspective defines and classifies the raw data
(such as document files, databases, images, presentations, and
spreadsheets) that the organization requires in order to efficiently
operate.
 The technology perspective defines the hardware, operating
systems, programming, and networking solutions used by the
organization.
 Advantages of having an enterprise architecture include improved
decision making, improved adaptability to changing demands or
market conditions, elimination of inefficient and redundant processes,
optimization of the use of organizational assets, and minimization of
employee turnover.

3
 Learning Objectives
At the end of the lecture students will be able to know:

1.What is business continuity planning

4
 What is Business Continuity Planning (BCP)?
A proactive process that identifies and prioritizes the critical functions and the likely threats to
those functions. Therefore, information, plans and procedures are developed through a regular
program of personnel training, plan testing, and maintenance. These management disciplines,
processes, and techniques provide business continuity for critical business functions under
the circumstances and limits set by senior management.
These circumstances and limits include:
 Defining worst-case scenarios used for business continuity planning.
 Approving the funding and staffing of the company's BCP Program.

5
 Why Should we do Business Continuity
Planning (BCP)?

 It is the right thing to do for our business matters, staff, and communities
 It ensures compliance with our ever increasing regulatory requirements
 It enhances our ability to avoid:
o Interruptions to business affairs
o Financial losses
o Regulatory fines
o Damage to equipment

6
 Why do we need Business Continuity Planning
(BCP) “Governance”?
The organization’s senior management team is responsible for overseeing the
business continuity planning process, which includes:

 Establishing policy by determining how the institution will manage and control identified
risks;
 Allocating knowledgeable personnel and sufficient financial resources to properly implement
the BCP;
 Ensuring that the BCP is reviewed and approved at least annually;
 Ensuring employees are trained and aware of their roles in the implementation of the BCP;
 Ensuring the BCP is regularly tested;
 Reviewing the BCP testing program and test results on a regular basis; and
 Ensuring the BCP is continually updated to reflect the current operating environment.

7
 How will we do it?
 Business continuity is treated as a process, not a project
 Methods are based on a proven, certifiable discipline
 Plans start simply and increase in sophistication as teams gain confidence
 Governance is provided for the whole system by Senior Management
 Established emergency management activities and protocols are interwoven into the BCP
process

8
 Phases of Continuity Planning

9
 How will we maintain it?
 Create or update business continuity plans
 Maintain current emergency contact information that is easily
accessible
 Test Business Continuity Plans
 Assign key players to emergency response teams
 Establish alternate work arrangements
 Know the organization’s emergency management procedures
 Save all work products to department’s shared server
 Store a disaster kit (Grab and Go) under the desk with items needed
during an emergency

10
 Business Continuity Planning Lifecycle

11
 Disaster Recovery
Disaster recovery best practices include:
 Mind the enterprise architectures
 Monitor the quality of computer networks that provide data on
power suppliers and demand
 Make sure the networks can be restored quickly in the case of
downtime
 Set up disaster recovery plans
 Provide adequate staff training

12
 Disaster Recovery

 Disaster recovery plan - a detailed process for recovering information or

 Disaster recovery cost curve - charts (1) the cost to the organization of
the unavailability of information and technology and (2) the cost to the
organization of recovering from a disaster over time

13
 Disaster Recovery

14
 Disaster Recovery
 Hot site - a separate and fully equipped facility where the
company can move immediately after a disaster and resume
business

 Cold site - a separate facility that does not have any computer
equipment, but is a place where employees can move after a
disaster

15
 Conclusion
 Business continuity planning (BCP) - is a plan for how an
organization will recover and restore partially or completely
interrupted critical function(s) within a predetermined time
after a disaster or extended disruption

16