Acknowledgments
About the Authors
Introduction
Chapter 1. Business Continuity and Disaster Recovery Overview
Abstract
In this chapter
Introduction
Business continuity and disaster recovery defined
Components of business
The cost of planning versus the cost of failure
Types of disasters to consider
Business continuity and disaster recovery planning basics
Summary
Key concepts
References
Chapter 2. Legal and Regulatory Obligations Regarding Data and Information Security
Abstract
In this chapter
Introduction
Impact of recent history
Current regulatory environment
Information security management
Did you know?
Summary
Key concepts
References
Case Study: Legal Obligations Regarding Data Security
Abstract
In this chapter
Contributor profile
Background
The Sony PlayStation incident
State laws regarding data security
Federal laws regarding data security
Conclusion
References
Chapter 3. Project Initiation
Abstract
In this chapter
Introduction
Elements of project success
Project plan components
Project organization
Project planning
Project implementation
Project tracking
Project close out
Key contributors and responsibilities
Project definition
Business requirements
Functional requirements
Technical requirements
Business continuity and disaster recovery project plan
Summary
References
Business Continuity and Disaster Recovery in Energy/Utilities
Abstract
In this chapter
Introduction
Integrating BC/DR requirements into IT governance
Improving BC/DR recovery and risk mitigation strategies
Improving BC/DR testing
Summary of best practices and key concepts
References
Chapter 4. Risk Assessment
Abstract
In this chapter
Introduction
Risk management basics
People, process, technology, and infrastructure in risk management
IT-Specific risk management
Risk assessment components
Threat assessment methodology
Vulnerability assessment
Summary
References
Chapter 5. Business Impact Analysis
Abstract
In this chapter
Introduction
Business impact analysis overview
Understanding impact criticality
Identifying business functions
Gathering data for the business impact analysis
Determining the impact
Business impact analysis data points
Preparing the business impact analysis report
Summary
References
Business Continuity and Disaster Recovery in Healthcare
Abstract
In this chapter
Introduction to healthcare IT
Regulatory environment
Healthcare IT risk management
Technical needs—Healthcare IT architecture
Healthcare operational needs
Interoperability among disparate systems
Current environment and new technology
Healthcare IT BC/DR best practices
Summary
References
Chapter 6. Risk Mitigation Strategy Development
Abstract
In this chapter
Introduction
Types of risk mitigation strategies
The risk mitigation process
Developing your risk mitigation strategy
People, buildings, and infrastructure
IT risk mitigation
Backup and recovery considerations
Summary
References
Chapter 7. Business Continuity/Disaster Recovery Plan Development
Abstract
In this chapter
Introduction
Implement risk mitigation strategies
Phases of business continuity and disaster
Defining BC/DR teams and key personnel
Defining tasks and assigning resources
Communications plans
Event logs, change control, and appendices
What’s next
Summary
References
Business Continuity and Disaster Recovery in Financial Services
Abstract
In this chapter
Overview
Finance industry regulation overview
Finance industry requirements for business continuity
Industry impact—September 11 attacks
Industry impact—Hurricane Sandy
Industry impact—Cyber threats
Looking forward
Summary
References
Chapter 8. Emergency Response and Recovery
Abstract
In this chapter
Introduction
Emergency management overview
Emergency response plans
Emergency response teams
Crisis management team
Disaster recovery
Business continuity
Summary
References
Business Continuity and Disaster Recovery for Small- and Medium-Sized Businesses
Abstract
In this chapter
Overview of SMB disaster recovery
SMB disaster preparedness: Survey results
On-Premise disaster recovery
Using a Co-location data center for disaster recovery
Disaster recovery in the cloud
Summary
References
Chapter 9. Training, Testing, and Auditing
Abstract
In this chapter
Introduction
Training for disaster recovery and business continuity
Training and testing for your business continuity and disaster recovery plan
Testing the BC/DR plan
Performing IT systems and security audits
IT systems and security audits
Summary
References
Chapter 10. BC/DR Plan Maintenance
Abstract
In this chapter
Introduction
BC/DR plan change management
BC/DR plan audit
Plan maintenance activities
Project close out
Summary
Key concepts
Appendix A. Risk Management Checklist
Risk assessment
Mitigation strategies
Appendix B. Crisis Communications Checklist
Communication checklist
Message content
Appendix C. Emergency Response and Recovery Checklists
High-level checklist
Activation checklists
Emergency response checklists
Recovery checklists
Appendix D. Business Continuity Checklist
Resuming work
Manufacturing, warehouse, production, and operations
Resuming normal operations
Transition to normalized activities
Appendix E. IT Recovery Checklists
IT recovery checklist one: Infrastructure
Recovery checklist three: Office area and end-user recovery
Recovery checklist four: Business process recovery
Recovery checklist five: Manufacturing, production, and operations recovery
Appendix F. Training, Testing, and Auditing Checklists
Training and testing
IT auditing
Appendix G. BC/DR Plain Maintenance Checklist
Change management
Glossary of Terms
Index
Access no. | Call number | Location | Status |
---|---|---|---|
01264/17 | 658.478 Sne B | Library - 7th Floor | Available |