业务连续性.pptVIP

Plan Purpose Scope Business Continuity Plan (BCP) Provide procedures for sustaining essential business operations while recovering from a significant disruption Addresses business processes; IT addressed only in the context of supporting business process Business Recovery (or Resumption) Plan (BRP) Provide procedures for recovering business operations immediately following a disaster Addresses business processes; not IT-focused Continuity of Operations Plan Establish procedures and capabilities to sustain an organization’s essential, strategic functions at an alternate site for up to 30 days Addresses subset of an organization’s missions deemed critical; not IT-focused Continuity of Support Plan Establish procedures and capabilities for recovering a major application or general support system Similar to IT contingency plan; addresses IT system disruption; not business process focused Disaster Recovery Plan (DRP) Provide detailed procedures to facilitate recovery of capabilities at an alternate site Often IT-focused; limited to major disruptions with long-term effects Incident Response Plan Define strategies to detect, respond to, and limit consequences of malicious cyber incident Focuses on information security responses to incidents affecting systems and/or networks Occupant Emergency Plan Provide coordinated procedures for minimizing loss of life or injury and protecting property damage in response to a physical threat Focuses on personnel and property particular to the specific facility; not business- or IT-focused 1) Develop a business continuity / disaster recovery plan - Establish a disaster-recovery team of employees who know your business best, and assign responsibilities for specific tasks. - Identify your risks (kinds of disasters youre most likely to experience). - Prioritize critical business functions and how quickly these must be recovered.- Establish a disaster recovery location where employees may work