Enterprise Continuity Planning
Integrated Principles of Disaster Recovery and Enterprise Continuity 19 Dec 2011
By Thomas A. Groshong Sr.

Summary
      

1. DRP/ECP Roles 2. Resilience Layers 3. Resilience Layers Examples 4. Disaster Recovery Training 5. Outside Expertise 6. Awareness Campaign 7. Awareness Campaign Implementation

1.1 Disaster Recovery Plan / Enterprise Continuity Plan (DRP/ECP) Roles
Maintaining DRP & ECP documents Personnel responsibilities Backup data scheduling Maintaining equipment status reports Security systems and emergency lighting Operational procedures Environmental controls
(Cunningham et al., 2007)

2. Resilience Layers
Six Resilience Layers
1. Strategy & Vision 2. Organization 3. Processes 4. Applications & Data 5. Technology 6. Facilities
(Goble, G., Fields, H., & Cocchiara, R., 2002)

2.1 Strategy & Vision
Business goals & objectives Resilience assessment
Assess Risks Assess Vulnerabilities

Strategic plan for success Baseline objectives

(Goble et al., 2002; A comprehensive, 2007)

2.2 Organization
Document roles Responsibilities Accountability Communications protocols Business links Skills critical to organization
(Goble et al., 2002; A comprehensive, 2007)

2.3 Processes
Process creation Process sustainment Process alternatives Contingency planning

(Goble et al., 2002; A comprehensive, 2007)

2.4 Applications & Data
Provide reliable data Align disparate data and applications Determine tolerance levels Fault tolerance Diversification Testing end-to-end
(Goble et al., 2002; A comprehensive, 2007)

2.5 Technology
Resiliency objectives Flexibility Evaluate and align IT investments Identify single points of failure Alternate site considerations Critical hardware and software
(Goble et al., 2002; A comprehensive, 2007)

2.6 Facilities
Physical and logical security