tashatuvango - Fotolia
Developing business recovery plans is a complex process involving research and analysis. The goal of these multifunction documents is to get the organization operational as quickly as possible after a technology disruption. But information gleaned from their development can occasionally be used in other areas.
Typical business recovery plans include information useful for any period of time, such as:
- Employee and stakeholder contact lists;
- Emergency contact lists;
- Vendor lists;
- Utility company contacts;
- Instructions for performing recoveries;
- Instructions for performing DR tests;
- Roles and responsibilities of DR teams;
- Equipment lists; and
- Technical diagrams of systems, networks and other assets.
- Critical business processes that need to be maintained;
- Technologies required to support those processes;
- Resources to support those technologies;
- Internal and external dependencies the technologies need to function;
- Vital records and documentation necessary to manage the technology; and
- Operational and financial impacts from a loss of the technology.
The risk analysis identifies internal and external risks and threats to the continued operation of the technology outlined in the business impact analysis. Data from the risk analysis helps to identify and prioritize situations that must be addressed to mitigate negative outcomes to the organization if a specific threat occurs.
Here are five suggestions for how to get even more mileage out of business recovery plans:
- Results of the business impact analysis could be used to identify opportunities for process improvement and ways technology can better support business processes.
- Results of the risk analysis could be used as part of a larger, company-wide risk analysis.
- Recovery instructions and other information contained in the plan could serve as an alternate source of documentation in case existing technical manuals are destroyed.
- The plan provides a single source of key contact information, reducing the need to search multiple sources for contact data.
- The plan could serve as a reference document for use in product planning, product design, service design and delivery, and other new business activities, ensuring that DR elements are factored into new business offerings.
A comprehensive guide to BC/DR planning
Five experts' DR plan necessities
Making the case for disaster recovery plans
Dig Deeper on Disaster recovery planning - management
Related Q&A from Paul Kirvan
A strong data protection strategy must follow applicable standards and regulations to protect data and comply with privacy laws. What are some key ... Continue Reading
A major element in maintaining business continuity during a pandemic is taking care of employee health. Pandemic-specific planning must be a part of ... Continue Reading
This backup and recovery audit checklist offers a comprehensive group of controls and evidence examples to get you ready for the important process of... Continue Reading