Business Continuity Strategy
Example BoK 4 BCS #1
1. What was performed?
- Identify and determine cost-benefit analysis for business continuity, crisis communication, crisis management and IT disaster recovery strategies.
- Identify and formalise alternatives/backup procedures for continuity of business while recovery is in progress
2. When was it done?
- This was conducted from March 201x to June 2020 as it included the setting up of the alternate site.
3. How was it carried out?
- A series of DR strategy workshops with divisional DR champions/ representatives was conducted to discuss and determine the types of business continuity and recovery options, and their cost and benefits.
- A number of recovery options were identified in relation to four key scenarios i.e. (i) Denial of access to the facility, (ii) denial of access to IT system, (iii) unavailability of key staff/majority of the workforce, (iv) unavailability of the key service provider.
- For denial of access to the facility
- affected staff will telecommute i.e. ensure staff can perform VPN etc. Telecommuting reduces the stress put on facilities management to source alternative working venues. The alternate command centre venues were also established.
- For denial of access to the IT system and/or data loss, an alternative recovery
- manual process or defer processing was established. The existing recovery point objective (RPO) were also reviewed to determine if existing IT infrastructure will need to be upgraded, and determine the appropriate setup (i.e., hot, warm or cold site) / reciprocal agreement is required.
- For unavailability of key staff/majority of the workforce due to pandemic flu, haze,
- split-team operations were established and the necessary equipping requirements were discussed.
- For the unavailability of the key service providers,
- the expected requirement of the service provider’s BC recovery plans was established.
- The recovery strategies and options were listed and presented to Senior Management Meeting and were approved.
- For denial of access to the facility