bcp / drp >>
Business Continuity and Disaster Recovery planning is considered a “safety net” for organisations' very existence that ensures business processes are maintained during disasters. Retaining business continuity and disaster recovery starts by identifying the exposure to internal and external risks and threats relevant to the organisation, mapping all business processes, and in turn, synthesise all assets and resources required to support effective recovery of the organisation. This will enable organisations to maintain competitive advantage or service provision.
Organisations may suffer greater impact upon choosing to avoid investment in business continuity and disaster recovery planning. The costs for recovery will be extensively higher or recovery may be completely impossible if caught unprepared.
Generally speaking, a disaster is defined as a situation where a total or partial cessation of critical business processes occurs and poses a threat over the business continuity and ability to operate or sometimes over the very existence.
BCP is a set of backup and continuity procedures in the various areas of the organisations everyday operations, designed to enable business processes under adverse conditions such as natural disasters, social threats (crime, epidemics, strikes), national threats, cyber attacks or any other event that may interfere with the business processes.
DRP is a supporting plan that enables the BCP to be executed. Such planning shall determine exactly how assets and resources are backed-up including all critical human resources, infrastructure such as machinery or computing/network resources, areas of operation etc.
Both plans are based on a business impact analysis (BIA) and threat impact analysis (TIA) performed by management level of the organisation prior to and as perequisite for BCP / DRP.
Disasters can be related and treated differently by organisations but failure to be ready for disasters that may harm your organisation, can cause a severe damage to productivity, profits, reputation, clients etc. It is therefore crucial to harness all relevant organisational business units and decision makers and to the planning and implementation process including management commitment.
Continuity and Recovery is achieved when all critical operations are restored. The following situations are the known phases in the organisational recovery life cycle:
- Routine and disaster readiness.
- Change over to emergency.
- Emergency routine and business continuity.
- Recovery and back to routine.
The following is a general methodology for achieving business continuity and disaster recovery plans: