Business Continuity Plans

Introduction

Is very important that before creating a Continuity Plan you have discussed the plan with all relevant stakeholders and have followed a process that somehow resembles the one proposed in this course.

Roles

When creating a business continuity plan you have three key roles you must define, we strongly recommend you use groups (see Access Management course) rather than individual accounts.

• Owner: typically the GRC team that has an interest in this plan to be created and tested
• Sponsor: the department that is affected by this Plan
• Launch Initiator: the department that when the catastrophe hits will be responsible for authorizing the initiation of the plan

Audits

Your BCP may optionally include an audit regime you will set based on the stakeholder agreements at the identification phase. In this tab you need to define three parameters:

• The dates (these dates apply to every year) when you would like to test the plan
• How you would like to test, typically is by running the tasks on the plan
• What the success criteria will be to determine if the tasks have delivered the desired outcomes

Tasks

Once your plan has been created is time to the Task tab and create the plan tasks. You will associate each task you create to your BCM plans.