A RFI/RFP checklist for DR/BC providers
You may want to release a Request for Information (RFI) about prospective suppliers or perhaps a Request for Proposal (RFP) if you know what you want. Items to address include:
- Availability of equipment and/or needed services
- One-time and recurring costs
- Comparison of similar offers from other vendors.
- Ability to support project goals, deliverables, performance and fulfillment requirements, and liquidity damages
- Experience stability, available services and reputation
- Staff details including project management, project teams and their technical experience and credentials
- Methodology that details project management, quality, regulatory compliance and security activities
- Documented success of vendor methodology
- Infrastructure stability and disaster recovery abilities
- Vendor profile, strategy, mission and reputation
- Vendor financial status, e.g., reviews of audited financial statements
- References, preferably from similar outsourced processes
- Quality initiatives and certifications
- Technology, infrastructure stability and applications
- Security and audit controls
- Legal and regulatory compliance, including complaints or litigation
- Policy regarding use of subcontractors
- Insurance coverage, e.g., liability, errors and omissions
- Vendor corporate policies for BC/DR and security
In these difficult times, BC/DR programs still focus on protecting staff, company assets and shareholder interests. Although business leaders are constantly challenged to look at things from different perspectives, BC/DR professionals must ensure that the business stays in business. Outsourcing BC/DR is yet another way to manage business survival while keeping pace with changing business dynamics.
Editor's Tip: For more information on DR/BC vendors, read listing of "A sampling of disaster recovery/business continuity providers."
About this author: Paul F. Kirvan, FBCI, CBCP, CISSP, has more than 20 years experience in business continuity management as a consultant, author and educator. He is also secretary of the Business Continuity Institute USA Chapter.
