灾难恢复计划.pptVIP

BUSINESS CONTINUITY PLAN AND DISASTER RECOVERY PLAN Abdulrahim Al-Abri OUTLINE Definitions BCP Phases Project Management and intonation Conduct Business Impact Analysis Recovery Strategies Plan Design and Development Testing, maintenance, awareness and training DEFINITIONS BCP PHASES Project Management and intonation Conduct Business Impact Analysis Recovery Strategies Plan Design and Development Testing, maintenance, awareness and training PROJECT MANAGEMENT AND INTONATION Developing and approval of BCP policy Define BCP committee: operational units representatives, senior management, IT security, IT specialized experts, and optionally support units like (technical affairs) Define BCP project scope and objectives Provide the necessary project funds and recourses BUSINESS IMPACT ANALYSIS Collect data through interviews, survey, documenting business functions, transactions. activities, Develop hierarchy of business functions and apply a classification scheme to indicate each individual function’s criticality level. Identify the resources that these functions depend upon Calculate Maximum Tolerable Time (MTD) for these functions Identify vulnerabilities and threats to these functions BUSINESS IMPACT ANALYSIS CONT. Calculate risk for each different business function Document findings and report them to management RECOVERY STRATEGIES Business process recovery Facility recovery Site Cost Hardware Equipment Telecommunications Setup Time Location Cold Site Low None None Long Fixed Warm Site Medium Partial Partial/Full Medium Fixed Hot Site Medium/High Full Full Short Fixed Mobile Site High Dependent Dependent Dependent Not Fixed Mirrored Site High Full Full None Fixed RECOVERY STRATEGIES CONT Supply and technology recovery Network and computer equipment Voice and data communications resources Human resources Transportation of equipment and personnel Environment issues (HVAC) Data and personnel security issues Supplies (paper, f