...IS 3110 Business Continuity Plan Contents 1.0 | About this Plan | Page No | 1.1 | Document Control | | 1.2 | Plan Purpose | | 1.3 | Plan Remit | | 1.4 | Plan Owner | | 1.5 | Plan Distribution | | 1.6 | Plan Storage | | 1.7 | Plan Review Date | | 1.8 | Plan Exercise/Testing | | 2.0 | Plan Activation | | 2.1 | Circumstances | | 2.2 | Responsibility for Activation | | 2.3 | Process for Activation | | 3.0 | Incident Management | | 3.1 | Purpose of the Incident Management Phase | | 3.2 | Actions to Protect the Safety of Staff, Visitors and members of the Public | | 3.3 | Communication Actions | | 3.4 | Actions to Support Business Continuity | | 3.5 | Actions to Support Recovery and Resumption | | 3.6 | Communicating with staff | | 4.0 | Business Continuity | | 4.1 | Purpose of the Business Continuity Phase | | 4.2 | Critical Activities | | 4.3 | Non Critical Activities | | 4.4 | Business Continuity Actions | | 5.0 | Resumption and Recovery | | 5.1 | Purpose of the Recovery and Resumption Phase | | 5.2 | Recovery and Resumption Actions | | 6.0 | Appendices | | | [Additional information can be added as needed through meeting with stakeholders] | | | | | | | | | | | 1.0 About this Plan 1.1 Document Control Date | Revision/Amendment Details & Reason | Author | | | | | | | | | | | | | 1.2 Plan Purpose The...
Words: 2943 - Pages: 12
...BUSINESS CONTINUITY PLAN (BCP) Business Continuity Plan (BCP) American Public University Instructor: Jenelle Davis, MS, CISSP, CISM, CISA, CSSLP September 12, 2014 Business Continuity Plan (BCP) The word Business continuity Planning is a plan that is used by businesses of all kinds in order to maintain a complete company presence for any and all customers new and old alike it will help a company in the event of a small incident all the way thru a big catastrophe for example if the company has a power outage and can’t get the systems up with a business continuity plan it would have a reasonable temporary solution for the temporary problem in order to keep the company running ,business as usual, by having a back-up generator that would have power delivered to the building and get all the systems that run on electricity back up and running until the power can be fixed or replaced on a permanent basis, this can also apply to situations that cause a more long term or permanent setback for a company and even in that instance a business continuity plan can be used as well again if the situation is more dire and the company had a problem like lead paint or asbestos or even something of a structural...
Words: 779 - Pages: 4
...Business Continuity Plan Under Development (May 2006) California State University, Stanislaus CALIFORNIA STATE UNIVERSITY, STANISLAUS BUSINESS CONTINUITY PLAN May 2006 Table of Contents INTRODUCTION I. II. III. IV. V. Incident Command System Business Impact Analysis Risk Assessment Business Plan for Localized Business Disruption Business Plan for Pandemics Page 3 Pages 4-7 Pages 8-11 Pages 12-13 Pages 14-15 Pages 16-17 Pages 18-19 Pages 20-36 Appendix IV-A: Power Outage Business Continuity Plan Appendix V-A: Pandemic Flu Business Continuity Plan 2 Final CP 5-30-06 CALIFORNIA STATE UNIVERSITY, STANISLAUS BUSINESS CONTINUITY PLAN May 2006 INTRODUCTION A Business Continuity Plan (BCP) is developed by an institution to plan for and describe how it will respond to and recover from disruptions. These disruptions can be localized threats (e.g., earthquakes, fires, floods, bombs, etc.) or global threats (e.g., Flu Pandemic). As part of the overall Emergency Operations Plan, California State University, Stanislaus has developed, and continues to refine and enhance, a Business Continuity Plan (BCP) for the University. This plan is about maintaining, resuming, and recovering the University’s activities as an educational institution. It considers human factors along with operational issues. The BCP was developed by a team of the University’s senior administrators and department managers representing all University divisions: Business & Finance, Academic Affairs...
Words: 10523 - Pages: 43
...Business Continuity Plan Template Version 1.0 August 2014 Table of Contents DOCUMENT CHANGE CONTROL 6 Section I: Introduction 7 A. How to Use This Plan 7 B. Objectives 7 C. Scope 8 D. Assumptions 8 E. Changes to the Plan/Maintenance Responsibilities 9 F. Plan Testing Procedures and Responsibilities 10 G. Plan Training Procedures and Responsibilities 10 H. Plan Distribution List 11 Section II: Business Continuity Strategy 12 A. Introduction 12 B. Business Function Recovery Priorities 12 C. Relocation Strategy and Alternate Business Site 12 D. Recovery Plan Phases 13 1. Disaster Occurrence 13 2. Plan Activation 13 3. Alternate Site Operations 13 4. Transition to Primary Site 13 E. Vital Records Backup 13 F. Restoration of Hardcopy Files, Forms, and Supplies 14 G. On-line Access to <ORGANIZATION NAME> Computer Systems 14 H. Mail and Report Distribution 15 Section III: Recovery Teams 16 A. Purpose and Objective 16 B. Recovery Team Descriptions 16 C. Recovery Team Assignments 16 D. Personnel Notification 17 E. Team Contacts 17 F. Team Responsibilities 17 Business Continuity Coordinator – <Insert Name> 19 EOC Communications Team – 19 EOC Human Resources Team – 20 EOC Administration Team – 20 Emergency Response Team – 21 Information Technology Recovery Team (See also Disaster Recovery Plan) – 21 Section IV: Recovery Procedures 23 A. Purpose and Objective 23 B. Recovery Activities and Tasks 24 PHASE I: Disaster Occurrence...
Words: 8008 - Pages: 33
...CheckPoint: Business Continuity Plan The steps involved in the Business Continuity Plan (BCP) include identification of the scope and boundaries. This mean to determine the critical aspects of the business that need to be part of the plan by analyzing people, facilities, IT systems, and risks. The second step is to create a Business Impact Assessment (BIA) as a result of the step one analysis. The third step is once the BIA is complete those who are responsible must present to senior management and cell the concept of the BCP. The last step is once the BCP is approved is to present it to all necessary departments making sure they understand all of the components. The purpose of a BCP is to prepare businesses in the event of disaster. This plan will provide employees with detailed instructions and backups in the event of an emergency. This is a great concept because in the event of disaster, companies will have reduced panic and knowledge of exactly what to do and how to carry on with business despite the circumstances. The case study I chose to read was “SunGard Helps Keep Atlantis health Plan’s Business in Business after Disaster Strikes.” This case study talked about how a disaster recovery company named SunGard helped Atlantis Health through their disaster. The two companies began working with each other after the 9/11 attacks in New York, when Atlantis Health had no BCP. After getting that situation under control the companies developed a plan in the preparation...
Words: 324 - Pages: 2
...Abstract This paper will include creation of a business continuity plan for Red Circle that addresses any pre-incident changes the company can do to minimize and mitigate risk. The companies’ use and protection of sensitive data will be analyzed. The companies’ use and protection of member information will be analyzed. Discussion of the communication plan to be used during and following the disruption will be explained. Lastly steps on how the companies operations will be restored after the disruption will be discussed. Business Continuity Plan Red Circle is a non-for-profit health insurance company located in Minnesota. Red Circle serves members in commercial and government lines of business. The company has three office campuses located in Eagan, Minnesota. These locations are within 1 mile of each other. The company also has a location about 4 hours north of these locations, which houses customer service operations and claims processing employees. Pre-incident changes A well thought out and planned business continuity plan is a necessity to keep a business operational if a disaster should strike the company. Red Circle can be prepared for any disaster by having a business continuity plan in place with trained staff on how to implement the plan, if disaster or disruption occurs. Annually the business continuity plan should be reviewed for accuracy and updates. Since Red Circle is located in the Midwest region, which is prone to tornadoes, the company...
Words: 3224 - Pages: 13
...RUNNING HEAD: BUSINESS CONTINUITY PLAN Mercy Hospital Business Continuity Plan Susan Drago Jacksonville, Florida Western Governors University 1 RUNNING HEAD: BUSINESS CONTINUITY PLAN 2 Mercy Hospital Business Continuity Plan The number one priority for hospitals is to provide continuous, superior care to patients, regardless of circumstance. This principle results in the need to invest time and resources in preparing for disruptive events. Hospitals are required to invest in preparedness measures by external agencies, such as The Joint Commission and other accreditation bodies. This requires hospitals to have an emergency preparedness program. Six critical areas that a hospital plan must address include: Communication; Resources and Assets; Safety and Security; Staff Responsibilities; Utilities Management and Patient Clinical and support activities (JCAHO, 2012). Government regulations such as the Health Information Portability and Accountability Act (HIPAA) also require hospitals to protect all medical information, including electronic medical records (EMR), which requires a robust information security program. Business continuity refers to an integrated set of plans, procedures and resources that may be used to maintain and recover essential functions impacted from any event causing an interruption of healthcare delivery services. The key elements of a hospital business continuity plan are: Governance-Define and align with executive priorities...
Words: 3492 - Pages: 14
...Introduction: DLIS has decided to develop a business continuity plan (BCP) with the full support of management. Instructions: DLIS business continuity plan will come into effect as soon as all elements meet specific guide lines and have been tested. Scope: DLIS will build and maintain a business continuity plan to insure operations will continue in the event of a single point of failure. Objective: DLIS has a warm site located 50 miles from the head quarter office ready to conduct business with a fully mirrored system and minimum staffing available in case of an unplanned interruption or disaster should occur. System Description and Architecture: The BCP for DLIS will identify critical business functions that need to remain operational during a disruption * 50 file servers * 12 databases * Enterprise Resource Planning software (ERP) * Electronic Funds Transfer software (EFT) DLIS Mission: To receive, edit, and route logistics transactions for the Military Services and Federal Agencies to provide value added services for standard MILS transactions provide information about anything, anywhere, anytime, anyway, to anyone in the DoD and Federal Logistics Community. * Army * Navy * Marines * Air Force, Defense Agencies * NATO/Allies Alert/Notification/Activator Procedures: The BCP coordinator for DLIS will declare the notification/activation phase and notify all team leads. Team leads will be responsible...
Words: 661 - Pages: 3
...Business Continuity Planning (BCP) is a program in which businesses and organizations are planning ahead the possible crisis that may affect their operation (Vacca, 2013). This crisis is not only limited to natural disasters like flood or thunderstorms but also applicable to the death or sudden resignation of important employees that have key roles in their operations (NIST, 2010). Incident Recovery focuses on the set of actions that businesses will take after suffering disaster may it be natural or man-made. Its sole purpose is business preservation, meaning, how the businesses would cope and be able to operate again after a disaster occurred like loss of electricity, computer viruses, and thieves. The Incident Recovery is a just a part of BCP (NIST, 2010). Unlike BCP which focuses on how businesses will continue to operate in the midst of disasters like storms, tornados and hurricanes, the Incident Recovery focuses on how to recover from the said events and how to preserve the properties that are integral in their daily operations. The BCP carefully plans the things to make them in order to lessen the amount of damage brought by the whatever natural disaster while the Incident Recovery Plan, as what its name suggests, plans carefully how to restore and set up the business operation back to its normal condition (NIST, 2010). Developing BCP and Incident Recovery is not as simple as it may look. It involves different processes and brain storming to create and maintain...
Words: 387 - Pages: 2
...Customers are the life of a business, so contact with customers is a top priority. Business continuity is much more than just a fancy word for "backup" — although some organizations treat it that way. A comprehensive business continuity plan (BCP) provides a roadmap for continuance and/or restoration of mission-critical functions during and after a disaster, such as a fire, flood, tornado or even a disease epidemic.Your BCP must be thought out, written down, and distributed to key personnel well ahead of any incident that could cause a disruption to your operations. Copies should be stored off-site — an obvious but often overlooked requirement. Here are 10 things a good BCP includes. —more—Note: This information is available as a PDF download. #1: Analysis of potential threats Your company's response to a disaster will depend on both the nature and the extent of the disaster. Some threats, such as a tornado or flood, may physically destroy your IT infrastructure. Others, such as pandemic disease, affect human resources while leaving buildings and machinery intact. A cyberterrorism attack might bring down your network but not affect the functionality of the hardware or your personnel. A bombing may destroy both human life and network components. A power outage could render your equipment unusable, but do no lasting damage. Thus your plan should cover contingencies for as many threat types as possible. #2: Areas of responsibility A key component in any...
Words: 2561 - Pages: 11
...Business Continuity Plan | | [Type the author name] | 5/16/2013 | | Part 1 I. Initiation of the BCP The initiation of a BCP is an effort by the company to ensure that mission-critical functions of the organization have the ability to continue operations in the event of a disruption. II. Business Impact Analysis The BIA is the part of the BCP that prioritizes mission-critical functions and processes and accesses the impact of various types of disruptions. This includes but is not limited by intruders, injections, server crashes and more. III. Business Continuity / Disaster Readiness / Recovery Business continuity is described as the ability of a business to continue to operate during and after a disaster. Disaster Readiness is how well an organization is prepared to handle a disaster. Recovery is what must be done in the event of a disaster to bring the organization back to normal functionality. IV. Develop & Implement the Plan This is the process of creating a plan that details how the organization will react in the event of a disaster, and the implementation of the plan is informing management, employees, and customers of the new policies. V. Test & Update the Plan The testing of the plan consists of either simulations or full-blown test of the plan. This will help to identify anything that was missed in the development phase and allow for the plan to be properly updated. Part 2 Lab 8 Questions 1. A BCP can help to...
Words: 456 - Pages: 2
...CBAIA Business Continuity and Disaster Recovery Plan January 27, 2015 Table of contents I. Plan Overview II. Plan Goals and Objectives III. Disaster or Event Categorization IV. Disaster Recovery Team V. Risk Identification/Risk Analysis VI. Risk Mitigation I. Plan Overview CBAIA is taking steps to provide risk mitigation, business continuity, and disaster recovery for its information technology and communications infrastructure. The following sections detail the operational plan and recommend responsible parties. When possible, the plan sections provide detailed contact information for the plan’s responsible parties and stakeholders. This plan is CONFIDENTIAL and is the property of CBAIA. II. Plan Goals and Objectives a. The objective of this business continuity and disaster recovery plan includes the following: 1. To provide the ability to resume key business operations quickly and safely within the shortest amount of time following a disaster or business interruption. 2. To mitigate the impact of a disaster to CBAIA stakeholders. 3. To reduce confusion with respect to operational steps and responsibility in the event of a disaster. 4. To ensure the safety of all CBAIA employees. 5. Provide backup information to a colocation. 6. Provide Uninterrupted Power Supply (UPS)/generator in case of an outage allow employees to continue working. III. Disaster or Event Categorization a. The CBAIA recovery plan addresses three types of disaster or business...
Words: 385 - Pages: 2
...MEMORANDUM Date: April 24, 2016 To: The Berkshire Group From: Michael Cuomo RE: Importance of a Contingency Plan The key in operating a successful company is satisfying consumer needs in any type of market environment. May it be quick pace, stagnant, and or economic disaster. A company’s survival in any market situation depends on how prepared a company is for all times. May they be the best of times, or the worst. The continuity plan outlines the vital steps that need to be followed in the wake of a disaster. Continuity planning addresses concerns such as a CEO becoming severely sick, multiple turnover of key personnel within the company, or any type of lawsuits that could cripple the company financially and or its public image. A continuity plan has many benefits. These benefits can show the leadership within the company the strengths and weaknesses. This can allow adulterations in a company that can either drastically improve situations or could potentially make things worse. In all reality, it’s always beneficial to understand where the weak links in the chain are currently. In the creation and finalization of the continuity plan, there can be assessments made that can highlight employees that are lacking, resources that are being utilized too much and or too little, and strategies that might be misdirecting. The point of the matter is that a continuity plan can highlight main defects within a company and prepare a company for the worst case scenario. Everything...
Words: 264 - Pages: 2
...ISS 310 Mr. Behboodi CCSD Business continuity Plan Assignment 2 03/22/2016 The business continuity planning (BCP) is the creation of a strategy through the recognition of threats and risks facing a company, with an eye to ensure that personnel and assets are protected and able to function in the event of a disaster. When business is disrupted, it can cost money. Lost revenues plus extra expenses means reduced profits. Insurance does not cover all costs and cannot replace customers that defect to the competition. This strategy can be comprised of a basic 4 part setup with an array of sub categories within these guidelines. The type of business that I will be making a mock example for would be an IT business. This paper will also explain the composition of the 4 parts of a BCP. The battle plan. Consisting of 4 parts, Business impact analysis, plan development and testing and Exercises. Part 1 the business continuity impact analysis picks up on the problems resulting from negative effects of a normal business function and processes. This makes it easier to fix and rectify the problem down the road. Also conducting a workshop to instruct business function and process mangers how to complete the business impact analysis. Once finishing a basic training for management level employees, conduct follow up...
Words: 527 - Pages: 3
...In a business continuity plan (BCP), people knowing what needs to be done and who will do it, is BCP 101. Have you ever heard of only one person responsible for all BCP operations? The BCP is a team effort, remember BCP is not only about IT equipment. Looking at BCP, does all emergencies occur during the beginning of the shift? When is a flood going to happen, only at 8 a.m. in the morning? BCP main function is to notify people that need to restore operations. One of the articles I found was The Role of Communications Planning in Business Continuity. They outlined four critical parts that communications have in the BCP, notification, verifications, stabilization, and recovery. If the people do not know the plan, in a real situation, business...
Words: 561 - Pages: 3
