Business Continuity and Disaster Recover Planning

Integrated Business Continuity Management Framework

Pre-Disaster Event

Risk & Issues Management

Disaster Event

Crisis Management / Emergency Response

Post-Disaster Event

Business Continuity and Disaster Recovery

Strategic Communications

Governance Management

Proactive

Presumption

Reactive

Response

Resumption

Curative

Recovery

Restoration

Return to business as Usual

Business Continuity Delivery Methodology

Establish (Plan)

Implement and Operate (Do)

Monitor and Review (Check)

Maintain and Improve (Act)

Plan Phase

  • Develop business requirements based on BIA results
  • Understand critical ICT* services
  • Develop/Update IRBC** policies
  • Identify performance gaps
  • Develop strategy options

Do Phase

  • Document IRBC processes
  • Implement IRBC strategies
  • Implement/Update ICT response and recovery plans
  • Execute training and awareness activities

Check Phase

  • On Going
    • Monitor, detect and analyze threats
    • Measure IRBC performance
  • Annual Review
    • Test and exercise IRBC strategies
    • Review and audit by internal and external groups

Act Phase

  • Management reviews IRBC program
  • Management directs IRBC improvement measures

*ICT – Information Communication Technology
** IRBC - ICT Readiness for Business Continuity