Scribd
Upload
83 views22 pages

Continuity Presentation

The document discusses business continuity plans (BCP), which are plans to keep critical business functions running during and after a disaster. It covers topics like auditing a BCP, real-world examples of effective BCPs like IBM's multi-site backup centers, and data recovery examples from companies like HP. An effective BCP involves risk assessment, priority setting, recovery strategies, documentation, testing, and management support. Auditing a BCP verifies preventative controls and recovery procedures through examination of daily activities, backups, systems, training, and testing.

Uploaded by

vengiel
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPT, PDF, TXT or read online on Scribd
83 views22 pages

Continuity Presentation

The document discusses business continuity plans (BCP), which are plans to keep critical business functions running during and after a disaster. It covers topics like auditing a BCP, real-world examples of effective BCPs like IBM's multi-site backup centers, and data recovery examples from companies like HP. An effective BCP involves risk assessment, priority setting, recovery strategies, documentation, testing, and management support. Auditing a BCP verifies preventative controls and recovery procedures through examination of daily activities, backups, systems, training, and testing.

Uploaded by

vengiel
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPT, PDF, TXT or read online on Scribd
You are on page 1/ 22

What if…

Presented by:
Aly Peavy, Bart Stone, Aby Dattero, and Tae
Berg
Topics

Business Continuity Plan (BCP)

Auditing a BCP

Real-world example
What would happen if…

• A hurricane hit?
• A fire occurred?
• Power was interrupted?

– What would you do?


– What would a business do?
The need for a plan
• Risk of going out of business
• Cheaper in the long-run
• Provides order and structure
• Required

• Better to have the plan and never


use it than to never plan and be
unprepared when disaster strikes.
Business Continuity Plan

• Business Continuity Plan


– A plan that consists of the set of
procedures designed to keep critical
business functions up and running
during and after a disaster.
• Goal
– To prevent disruptions in business
operations
BCP - Elements
• Analysis
– Identification of risks/threats
• Response/recovery Design
– Plan of action
• Implementation
• Testing
• Maintenance
Achieving an Effective
Plan
• Obtain Top Management
Commitment

• Establish a Planning Committee

• Perform a Risk Assessment


Achieving an Effective
Plan
• Establish Priorities for Processing
Operations

• Determine Recovery Strategies

• Perform Data Collection


Achieving an Effective
Plan
• Organize and Document a Written Plan

• Develop Testing Criteria and


Procedures

• Test the Plan

• Approve the Plan


Data and Systems
Recovery

• Storage and Backup of Data

• Hot, Warm or Cold?

• Cloud Computing
Auditing a BCP

Abby Dattero
Auditing a BCP
• 3 Step Process

1. Validating the business continuity


plan

2. Scrutinizing and verifying


preventive and facilitating measures
for ensuring continuity

3. Examining evidence about the


performance of activities that can
assure continuity and recovery
Validating the BCP

• Preventive controls

• Recovery controls
– RTO and RPO
– BCP
Scrutiny and Verification

• Disaster recovery site


– Accessibility
• Outsourcing
– Contracts
• Supporting equipment
– Accessibility
Examining Evidence about
Performance of Activities
• Daily activities
• Backup tapes/backup logs
• Look at all components
– Operating system, database, etc.
• Verification of maintenance
– Has plan been tested? How
thoroughly?
– Table top testing/complete drill
People

• Inquiry and verification


• Training programs
• Awareness campaigns
Examples of Recovery
Plans and Their
Effectiveness

Bart Stone
IBM

• $300 million to invest in backup


centers
• “Cloud Computing” data centers
• 10 different countries
HP YouTube Example?

• HP Example
• 3:10 – 4:10
Impressive What People
Can Recover
• Space Shuttle Columbia example
• Kroll On-track Incorporated
• "When we got it, it was two hunks
of metal stuck together. We
couldn't even tell it was a hard
drive. It was burned and the edges
were melted," said Edwards, an
engineer at Kroll Ontrack Inc.
Works Cited
• Auditing Business Continuity, By S. Anantha Sayana
• IS Auditing Guideline: Business Continuity Plan, ISACA
• http://en.wikipedia.org/wiki/Business_continuity_planning
• http://www.informit.com/articles/article.aspx?p=768381
• http://www.msnbc.msn.com/id/24542368/
– Brian Bergstein 5/9/2008 “Data Recovery Specialist Tells
Columbia Story”
• http://www.tsl.state.tx.us
– Texas State Library and Archives. State and Local Records
Management Division.
• http://www.reuters.com/article/businessNews/idUSN193671682
0080820
– 8/19/2008 “IBM invests $300 mln in disaster recovery
centers” Jim Finkle
• http://www.youtube.com/watch?v=ndpjNhd1MtE
– HP Disaster Recovery Video from YouTube
Works Cited Continued
• http://www.microsoft.com/protect/yourself/data/storage.mspx
• http://www.samag.com/documents/s=9364/sam0106sc/0106c.
htm
• http://ezinearticles.com/?CompTIA-Network+-Certification-
Exam-Tutorial:--Hot-Sites,-Warm-Sites,-and-Disaster-
Recovery&id=331743
• http://ezinearticles.com/?CompTIA-Network+-Certification-
Exam-Tutorial:--Hot-Sites,-Warm-Sites,-and-Disaster-
Recovery&id=331743
• http://www.infoworld.com/article/08/04/07/15FE-cloud-
computing-reality_1.html
• http://en.wikipedia.org/wiki/Cloud_computing#Companies
• http://articles.techrepublic.com.com/5100-10878_11-
5988931.html
• http://www.sba.gov/services/disasterassistance/disasterprepar
edness/index.html
• http://www.drj.com/new2dr/w2_002.htm

You might also like