book

Business Continuity Management: Choosing to Survive

Name: Business Continuity Management: Choosing to Survive
Author: Abdullah Al Hour
ISBN: 9781849283007

by Abdullah Al Hour

July 2012

Intermediate to advanced

394 pages

5h 8m

English

IT Governance Publishing

Read now

Unlock full access

Cover
Title
Copyright
Contents
Preface
About the Author
Acknowledgements
Chapter 1: Introduction
What is business continuity management?Benefits of effective BCM programsEmerging risk and threat topologiesBCM and risk managementBCM and complianceBCM and insurance
Chapter 2: Setting up the BCM Program
Gathering key success factorsEstablishing the governance modelEstablishing the BCM organizational unitOrganizations with a regional or international presence
Chapter 3: Running the BCM Life Cycle
Running the BCM life cycle for the first timeBusiness impact analysisRisk and threat assessmentStrategies and risk treatment plansPlanning and implementationAwareness and trainingTestingRerunning the cycle

Chapter 4: BCM Standards
ISO22301 societal security – preparedness and continuity management systems – requirementsASIS SPC.1-2009 organizational resilience: security, preparedness, and continuity management systems requirements with guidance for use
Chapter 5: Technology Continuity
IT disaster recovery and readiness for business continuity (ITDR and IRBC)Technology continuity sitesTechnology continuity outside IT
Chapter 6: Technology Continuity Standards
ISO/IEC 27031 information technology – security techniques – guidelines for information and communication technology readiness for business continuity (IRBC)ISO/IEC 24762:2008 information technology – security techniques – guidelines for information and communications technology disaster recovery sites
Chapter 7: Facilities Management and Physical Security
Facilities managementPhysical security preparationsEnvironmental setups and preparations
Chapter 8: Evacuation Plans
Features of an effective evacuation planEvacuation plan developmentCommunicating the plansTraining and testing
Chapter 9: People and BCM
The importance of peopleSuccession planning
Chapter 10: BCM Software
The need for BCM softwareRole of BCM software within the BCM life cycleFeatures of effective BCM softwareDeploying BCM software
Appendix 1: BCM Policy
ObjectivePolicy statementPolicy ownership and maintenanceDisaster definitionPolicy guidelines
Appendix 2: BIA Questionnaire
PurposeQuestionnaire contactsTerminologyUnderstanding your processes – general process informationUnderstanding your processes – internal and external dependenciesUnderstanding your processes – impacts and criticalityIdentifying RTO, season, and RPOUnderstanding your processes – IT and resource requirementsSuccession planning – identification of human resourcesAssets required during disaster – identification of recovery resources
Appendix 3: BIA Report
Executive summaryAbbreviations and acronymsIntroductionScopeApproachAssumptionsConsolidated resultsObservationsRecommendations
Appendix 4: Risk Assessment Questionnaire
Appendix 5: Risk Assessment Report
IntroductionObjectivesApproachSummary of resultsDetailed risk informationRisk treatment plan
Appendix 6: BCM Strategy Report
Executive summaryIntroductionKey inputs for developing the business continuity strategyObjectives of the business continuity strategyMethodologyOverview of the preferred/recommended business continuity strategy for the organizationBusiness continuity strategy – crisis managementBusiness continuity strategy – processesBusiness continuity strategy – technologyBusiness continuity strategy – data and informationBusiness continuity strategy – suppliesBusiness continuity strategy – peopleBusiness continuity strategy – facilities and premisesBusiness continuity strategy – business continuity managementImplementation and ownership
Appendix 7: BCM Plan
ScopeObjectiveTeam leader contact details and responsibilitiesTeam member detailsActivities to be performed immediately after a disasterActivities to be performed during disaster recoveryRelevant locationsProcesses to be performed if IT systems are availableProcesses to be performed if IT systems are not availableResource requirementsList of documents/manuals to be stored off siteContact listVendor listSample press releaseHandling a media interview
Appendix 8: ITDR Plan
ScopeObjectiveTeam structureActivities to be performed immediately after a disasterActivities to be performed during disaster recoveryRelevant locationsDisaster declaration matrixRecovery proceduresList of documents/manuals to be stored off siteContact listVendor list
Appendix 9: Evacuation Plan.
Description of buildingMap containing building and assembly point(s)Floor layoutsHandling fire emergenciesRoles and responsibilitiesImportant emergency numbersEmployees’ emergency contact information
Appendix 10: Test Plans and Forms
ScopeObjectivesTest frequencyTest typesThe test process and mechanismTests calendarDetailed test planTest preparation formTest assessment form
ITG Resources

Content preview from Business Continuity Management: Choosing to Survive

CHAPTER 4: BCM STANDARDS

Throughout the history of BCM, there have been noticeable variances in terms of understanding, implementations, and requirements across the world. These were caused by a local and isolated approach towards BCM, neglecting the international and cross-border effects. As the world effectively moved closer together, the BCM industry needed a push towards standardization. In 2003, the British Standards Institute (BSI) took a major step forward and issued a publicly available specification (PAS), which was given the code 56, addressing the subject of business continuity management. PAS 56 remained in circulation until December 2006, when the BSI issued the first British, intended to be global, BCM Standard with the code BS25999. ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781849283007

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Business Continuity Management: Choosing to Survive

by Abdullah Al Hour

CHAPTER 4: BCM STANDARDS

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.