Business Resumption Planning, Second Supplement

Introduction Part I Business Operations Recovery I-1 Obtaining Senior Management Sponsorship I-2 Organizing the Project I-3 Conducting the Business Impact Analysis I-4 Identifying and Documenting Critical Business Processes I-5 Identifying and Documenting Resource Requirements I-6 Organizing the Business Operations Recovery Teams I-7 Recovery Planning for Microcomputers and LANs I-8 Business Operations Recovery Plan Testing, Maintenance, and Training I-9 Disaster Mitigation Controls for Microcomputer Systems I-10 Planning for Y2K — Staying Focused I-11 Case Study: Illinois Bell Telephone-Hinsdale Central Office Fire — May 8, 1988 Part II Data Center Recovery II-1 Introduction to Data Center Recovery Planning II-l-l II-2 Developing the Data Center Recovery Plan II-3 Organizing the DCRP Development Project II-4 The Recovery Headquarters Team Section of the DCRP II-5 The Computer Operations Recovery Team Section of the DCRP II -6 The Disaster Site Recovery Team Section of the DCRP II-7 Developing the Initial Disaster Alert Procedure II-8 Performing an Applications Impact Analysis II-9 Selecting a Computer Processing Recovery Strategy II-10 Protecting and Recovering Computer Data II-11 Testing the Data Center Recovery Plan II-12 Preventative Controls II-13 Life Safety/Emergency Response Actions for Natural Disasters II-14 Life Safety/Emergency Response Actions for Fires and Bombs II-15 Evaluating the Recovery Headquarters Team Following an Actual Recovery Operation II-16 Evaluating the Computer Operations Recovery Team Following an Actual Recovery Operation II-17 Evaluating the Disaster Site Recovery Team Following an Actual Recovery Operation II-18 The Human Services Function II-19 Continuing the Program II-20 Maintaining Backup Systems and Database Consistency Checks (DBCC II- 21 Using Televaulting and Hot and Cold Sites for Disaster Recovery Part III Voice and Data Communications Recovery III -1 Understanding the Causes of Communications Disasters III -2 Obtaining Management Commitment III -3 Identifying Resources for the Planning Project III -4 Evaluating the Communications Environment Using Standards III-5 Documenting Global Recovery Procedures III- 6 Documenting Communications-Specific Recovery Procedures III -7 Communications Recovery Plan Testing, Maintenance, and Training III-8 Evaluating the Results of a Plan Activation III-9 Recovery Procedures for Communications Intensive Businesses III -10 Performing a Business Impact Analysis III-11 Conducting a Technical Vulnerability Analysis of the Physical Environment III-12 Assessing Standards and Controls III-1 3 Pulling it Together III-14 Adding Communications Network Support to Existing Disaster Recovery Plans Part IV Crisis Management Planning IV- 1 The Crisis Management Plan IV-2 The Stages of a Crisis IV-3 Role of the Executive Management Team IV-4 Role of the Crisis Management Team IV-5 Managing the Acute Crisis IV-6 The Crisis Management Command Center