1) Collection of Information includes comprehensive management interviews and site inspections.
2) Business Impact Analysis (BIA) is an executive management report designed to analyze information, identify risks and vulnerabilities, review emergency response procedures, examine communication systems and procedures, prioritize business operations and establish recovery time objectives, identify controls and exposures, and much more.
3) Business Continuity Plan (BCP) is the central or overarching plan for the business that defines command and control procedures, threat monitoring, plan activation, operational recovery strategies, and much more.
4) Crisis Response Plan is needed to define emergency actions to respond to actual specific emergency situations by business leaders and employees.
5) Information Technology Disaster Recovery Plan is designed to maintain systems and communication capabilities by addressing data center controls, alternate site planning, security controls and critical data management.
6) Department / Division Plans are a set of emergency preparation and response plans for the various support departments, operational groups and other infrastructure entities that comprise the business.
7) Implementation, Exercise and Ongoing Support of the entire program is needed to ensure the plan is effective in an actual emergency situation. |
