Scope of BCDR plan
BCDR is the combination of two interrelated business concepts. In this section, we will explore the concepts of business continuity and disaster recovery.
Business continuity planning
A business continuity plan looks at the risks and threats that face an organization and establishes a mechanism to ensure that business functions can continue to operate in the event of a disaster.
The key input for the information security professional when it comes to business continuity planning is from business or mission stakeholders. The key term in business continuity planning is business. The focus should not initially be on technology as technology serves to enable the business to do its work. Rather, the focus should be on the business functions that technology is supporting.
Key questions that you should be answering as you are developing your business continuity plan include:
- What are your organizational risks: As part of your information security program, you should be well versed...