A Guide To Business Continuity Planning

A Guide to Business Continuity Planning A Guide to Business Continuity Planning James C Barnes JOHN WILEY & SONS, LTD Chichester ● New York ● Weinheim ● Brisbane ● Singapore ● Toronto Copyright © 2001 by John Wiley & Sons, Ltd Baffins Lane, Chichester, West Sussex, PO19 1UD, England National 01243 779777 International (+44) 1243 779777 e-mail (for orders and customer service enquiries): [email protected] Visit our Home Page on http://www.wiley.co.uk or http://www.wiley.com All Rights Reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, including uploading, downloading, printing, recording or otherwise, except as permitted under the fair dealing provisions of the Copyright, Designs and Patents Act 1988, or under the terms of a licence issued by the Copyright Licensing Agency, 90 Tottenham Court Road, London, W1P 9HE, UK, without the permission in writing of the Publisher. Requests to the Publisher should be addressed to the Permissions Department, John Wiley & Sons, Ltd, Baffins Lane, Chichester, West Sussex, PO19 1UD, UK or e-mailed to [email protected] or faxed to (+44) 1243 770571. Other Wiley Editorial Offices John Wiley & Sons, Inc., 605 Third Avenue, New York, NY 10158-0012, USA WILEY-VCH Verlag GmbH Pappelallee 3, D-69469 Weinheim, Germany John Wiley & Sons Australia, Ltd, 33 Park Road, Milton, Queensland 4064, Australia John Wiley & Sons (Canada) Ltd, 22 Worcester Road Rexdale, Ontario, M9W 1L1, Canada John Wiley & Sons (Asia) Pte Ltd, 2 Clementi Loop #02-01, Jin Xing Distripark, Singapore 129809 British Library Cataloguing in Publication Data A catalogue record for this book is available from the British Library This title is also available in print as ISBN 0 471 53015 8 Typeset in 10/12 pt Garamond by Dorwyn Ltd, Rowlands Castle, Hants Contents Foreword by Philip Jan Rothstein 1 2 3 4 vii Introduction 1 The Structure of the Book Phases 2 2 Project Foundation 21 Initial Assessment BCP Evaluation Questionnaire Pre-Engagement Questionnaire Work Plan The Proposal Kick-off Meeting Policy Statement Data Requests 21 21 22 25 30 36 43 46 Business Assessment 57 Risk Assessment Business Impact Analysis (BIA) Conclusions 57 67 90 Strategy Selection 91 Computer Center Recovery No Strategy Relocate, Rebuild, Restore Cold Site Hot-Site Hot-Site with Electronic Vaulting Active Recovery Site (Mirrored) Reciprocal Agreements Other Component Recovery 93 94 94 94 94 111 112 112 113 vi 5 6 Contents Communications Recovery Voice Communications Data Communication Facilities Recovery Structure Power Insurance Business Income Insurance Additional Coverages Staff Recovery Vendor Selection Customer Relations Plan Strategies 113 113 115 115 115 115 116 117 117 118 119 119 120 Plan Development 121 Teams Emergency Management Team (EMT) Recovery Teams Documentation Rules 122 123 128 162 Tes