安达信咨询方法与工具资料库bcpdet.doc免费

Allied Industries MIS Review and Assessment Business Continuity Plan Page page 1 Objectives symbol 183 \f Symbol \s 8 \h To review the disaster recovery plan and procedures symbol 183 \f Symbol \s 8 \h To discuss the disaster plan testing and training symbol 183 \f Symbol \s 8 \h To assess the adequacy of the plan Scope We reviewed the disaster recovery plans currently in use, one dated December 1991 and the other dated March 1993. The December 1991 document was more comprehensive. Information System management indicated that applicable sections were going to be brought forward to the disaster recovery plan dated March 1993. We conducted a review of the hot site agreement with IBM and discussed testing procedures with the Information Systems and End User departments. We also evaluated environment controls, which can help detect and prevent hazards that can occur in a data center. Recommended Immediate Action Steps 1. Perform a Business Impact Analysis. This analysis encompasses several areas including the following; - Identify recovery goals in a needs assessment - Identify key business relationships and functions, including regulatory and contractual issues - Understand critical success factors to determine key functions that have to be restored - Perform a risk assessment - Develop an overall recovery time line 2. Perform the following based on the impact analysis: - Enhance the current disaster recovery plan by implementing a task-oriented approach. - Develop end-user procedures, e.g. fallback procedures. - Reconsider the method of backing up the mainframe database to meet critical business function time lines.