Information Assurance Handbook: Effective Computer Security and Risk Management Strategies

CHAPTER 24

Business Continuity Management

Maintaining or reconstituting an organizational operation under adverse conditions is something that must be fully thought out. The size of an organization does not change the importance of business continuity management (BCM). Even if an enterprise is run from a garage with records in a shoebox, it must be prepared for disaster. Organizations are exposed to major disruptive events that affect their business processes. Hence, BCM becomes both more important and more critical. BCM is part of continuous risk management. BCM is a planning effort and an operational practice involving reactive, diagnostic, and compensating controls for availability and integrity failures. Refer also to Chapter 11 on information ...