Business Resumption Planning, Second Supplement

Edward S. Devlin is a leading consultant, author, instructor, and speaker in the field of Business Continuity and Business Resumption Planning. Cole H. Emerson is president of Cole Emerson & Associates. A recognized leader in the field of business resumption planning, he has assisted companies throughout the world in recovery planning. Leo A. Wrobelyjr., president of Premiere Network Services, Inc., has more than two decades of experience in emerging network technology, disaster recovery planning, and technical training. Mark B. Desman has been a practitioner in information security and contingency planning for the past 19 years. His background includes being one of the first information security managers for American Savings of California as well as CalFed Bank (now NationsBank) and Gibraltar Savings in Southern California.

• Introduction Part I Business Operations Recovery I-1 Obtaining Senior Management Sponsorship I-2 Organizing the Project I-3 Conducting the Business Impact Analysis I-4 Identifying and Documenting Critical Business Processes I-5 Identifying and Documenting Resource Requirements I-6 Organizing the Business Operations Recovery Teams I-7 Recovery Planning for Microcomputers and LANs I-8 Business Operations Recovery Plan Testing, Maintenance, and Training I-9 Disaster Mitigation Controls for Microcomputer Systems I-10 Planning for Y2K — Staying Focused I-11 Case Study: Illinois Bell Telephone-Hinsdale Central Office Fire — May 8, 1988 Part II Data Center Recovery II-1 Introduction to Data Center Recovery Planning II-l-l II-2 Developing the Data Center Recovery Plan II-3 Organizing the DCRP Development Project II-4 The Recovery Headquarters Team Section of the DCRP II-5 The Computer Operations Recovery Team Section of the DCRP II -6 The Disaster Site Recovery Team Section of the DCRP II-7 Developing the Initial Disaster Alert Procedure II-8 Performing an Applications Impact Analysis II-9 Selecting a Computer Processing Recovery Strategy II-10 Protecting and Recovering Computer Data II-11 Testing the Data Center Recovery Plan II-12 Preventative Controls II-13 Life Safety/Emergency Response Actions for Natural Disasters II-14 Life Safety/Emergency Response Actions for Fires and Bombs II-15 Evaluating the Recovery Headquarters Team Following an Actual Recovery Operation II-16 Evaluating the Computer Operations Recovery Team Following an Actual Recovery Operation II-17 Evaluating the Disaster Site Recovery Team Following an Actual Recovery Operation II-18 The Human Services Function II-19 Continuing the Program II-20 Maintaining Backup Systems and Database Consistency Checks (DBCC II- 21 Using Televaulting and Hot and Cold Sites for Disaster Recovery Part III Voice and Data Communications Recovery III -1 Understanding the Causes of Communications Disasters III -2 Obtaining Management Commitment III -3 Identifying Resources for the Planning Project III -4 Evaluating the Communications Environment Using Standards III-5 Documenting Global Recovery Procedures III- 6 Documenting Communications-Specific Recovery Procedures III -7 Communications Recovery Plan Testing, Maintenance, and Training III-8 Evaluating the Results of a Plan Activation III-9 Recovery Procedures for Communications Intensive Businesses III -10 Performing a Business Impact Analysis III-11 Conducting a Technical Vulnerability Analysis of the Physical Environment III-12 Assessing Standards and Controls III-1 3 Pulling it Together III-14 Adding Communications Network Support to Existing Disaster Recovery Plans Part IV Crisis Management Planning IV- 1 The Crisis Management Plan IV-2 The Stages of a Crisis IV-3 Role of the Executive Management Team IV-4 Role of the Crisis Management Team IV-5 Managing the Acute Crisis IV-6 The Crisis Management Command Center