172 6.1 Business Recovery Planning Process
time. Business continuity planning minimizes the impact of disruption
while maximizing resources available to resume normal operations. The
principle objectives are to:
Minimize disruptions of service to the business and any external
entity relying on business data systems and the information stored in
them.
Provide a road map of predetermined actions that will reduce deci-
sion-making during recovery operations. Good planning will reduce
the number and magnitude of decisions that must be made during
the period when exposure to error is at a peak.
Ensure the timely recovery of critical and impacting systems, and
enable the recovery of normal business/service at the earliest possible
time in the most cost-effective manner.
Limit the impact of the disruption on the business mission and repu-
tation, and limit any financial losses.
6.1.1 Mobilizing a Business Recovery Team
Immediately following an emergency that seriously affects one or more of
the organization’s normal business processes, the business recovery team
(BRT) is to be notified. If there is need of a disaster recovery phase, then
initially the BRT is likely to be put on standby. If there is no disaster recov-
ery phase, or the disaster recovery phase is nearing completion, the BRT
will be asked to assemble at the Emergency Command Center set up to
control and manage both the emergency and the recovery process. This sec-
tion of the BCP contains a procedure for mobilizing the BRT and an
appropriate standard wording for notification. It may also contain the pro-
cess for alerting the members of the BRT, moving them from “standby sta-
tus” to “mobilization status.” It may be considered appropriate to include a
suitable three-stage alert status procedure:
Yellow: Place DRT on standby alert
Orange: Place DRT on alert
Red: Mobilize DRT