Atnaujinkite slapukų nuostatas

El. knyga: Building an Enterprise-Wide Business Continuity Program

  • Formatas: 344 pages
  • Išleidimo metai: 19-Apr-2016
  • Leidėjas: Auerbach
  • Kalba: eng
  • ISBN-13: 9781420088717
Kitos knygos pagal šią temą:
  • Formatas: 344 pages
  • Išleidimo metai: 19-Apr-2016
  • Leidėjas: Auerbach
  • Kalba: eng
  • ISBN-13: 9781420088717
Kitos knygos pagal šią temą:

DRM apribojimai

  • Kopijuoti:

    neleidžiama

  • Spausdinti:

    neleidžiama

  • El. knygos naudojimas:

    Skaitmeninių teisių valdymas (DRM)
    Leidykla pateikė šią knygą šifruota forma, o tai reiškia, kad norint ją atrakinti ir perskaityti reikia įdiegti nemokamą programinę įrangą. Norint skaityti šią el. knygą, turite susikurti Adobe ID . Daugiau informacijos  čia. El. knygą galima atsisiųsti į 6 įrenginius (vienas vartotojas su tuo pačiu Adobe ID).

    Reikalinga programinė įranga
    Norint skaityti šią el. knygą mobiliajame įrenginyje (telefone ar planšetiniame kompiuteryje), turite įdiegti šią nemokamą programėlę: PocketBook Reader (iOS / Android)

    Norint skaityti šią el. knygą asmeniniame arba „Mac“ kompiuteryje, Jums reikalinga  Adobe Digital Editions “ (tai nemokama programa, specialiai sukurta el. knygoms. Tai nėra tas pats, kas „Adobe Reader“, kurią tikriausiai jau turite savo kompiuteryje.)

    Negalite skaityti šios el. knygos naudodami „Amazon Kindle“.

For planners wanting to build a continuity program and protect a company from disaster, Okolita, a continuity planner, details how to develop a plan that will ensure the preservation of business operations and technology and outlines each step of the process for small and large enterprises, public or private. He provides practical tools for such areas as convincing those in leadership about the program, project initiation and management, creating a planning team and vital records program, risk evaluation and control, business impact analysis, resource requirements, documentation, training programs, plan testing, crisis and event management, planning for pandemics, and life safety. A sample plan is included. There is no bibliography. Annotation ©2009 Book News, Inc., Portland, OR (booknews.com)

If you had to evacuate from your building right now and were told you couldn’t get back in for two weeks, would you know what to do to ensure your business continues to operate? Would your staff? Would every person who works for your organization?

Increasing threats to business operations, both natural and man-made, mean a disaster could occur at any time. It is essential that corporations and institutions develop plans to ensure the preservation of business operations and the technology that supports them should risks become reality.

Building an Enterprise-Wide Business Continuity Program goes beyond theory to provide planners with actual tools needed to build a continuity program in any enterprise. Drawing on over two decades of experience creating continuity plans and exercising them in real recoveries, including 9/11 and Hurricane Katrina, Master Business Continuity Planner, Kelley Okolita, provides guidance on each step of the process. She details how to validate the plan and supplies time-tested tips for keeping the plan action-ready over the course of time.

Disasters can happen anywhere, anytime, and for any number of reasons. However, by proactively planning for such events, smart leaders can prepare their organizations to minimize tragic consequences and readily restore order with confidence in the face of such adversity.

Recenzijos

Okolita offers strategies for selling a business continuity plan to management, then provides the steps needed to get one in place that actually works. Considering how specialized much of the material is, the book is surprisingly easy to read as Okolita spices up the program with anecdotes from her own experience in corporate disaster planning. -Natural Hazards Observer Chapter by chapter, the author lays out a practical foundation for constructing a program, and she does it in a way that even seasoned professionals will find illuminating. ... Another valuable component of the book is the variety of templates and other tools found in the appendix. - Brian Strong, CPP CBCP, in Security Management

Introduction xvii
CHAPTER 1 Where it All Began from Someone Who Was There
Disaster Recovery vs. Business Continuity: What Is the Difference?
3
The Transition from Data-Center-Driven to Business-Driven
5
CHAPTER 2 Selling the Program
Financial Risks
12
Risk to the Company Reputation
13
Regulatory Risk
15
Hidden Benefits of the Planning Process
15
Why No One Believes in the "Big One"
16
CHAPTER 3 Project Initiation and Management
Defining the Scope of the Planning Effort
19
Defining a Timeline
21
Company Policy or Standard
22
Resource Requirements
22
Planning Phases and Deliverables
23
CHAPTER 4 Your Planning Team and Your Vital Records Program
Vital-Records Program
28
Data Stored in Electronic Form
28
Remote Replication/Offsite Journaling
28
Backup Strategies
29
Hard-Copy Data
30
CHAPTER 5 Risk Evaluation and Control
Risk Management 101
33
The Most Common Risks and Ways to Mitigate Them
35
Natural-Hazard Risks
36
Industry Risks
40
Don't Forget the Neighbors!
41
Risk-Management Practices
41
Physical Security
42
Information Security
42
Records Management
44
Privacy
45
Vendor Management
45
Operational Risk Management
46
Internal/External Audit
46
Managing the Risk
47
CHAPTER 6 Business impact Analysis
What is a BIA?
49
Why it is About Time Sensitivity, Not Criticality
49
How to do This and Get it Right
50
A Simple BIA Form
52
CHAPTER 7 Resource Strategies
How Many, What Type, and Where
55
Technology Review: Business People and Technology People Speak Different Languages
55
Desktop Image
57
Routing Calls
57
Printing, Faxing, and Copying
58
Unique Equipment
59
Interdependencies: Who Else Needs to Know/Who Else Needs to Help
59
The Business-Function Index
60
CHAPTER 8 Recovery Strategies
Selecting a Recovery Strategy for Business Operations
61
Selecting a Recovery Strategy for Technology
64
Cost-Benefit Analysis
66
Implementing Recovery Strategies
66
CHAPTER 9 Documenting the Plan
What Are the Components of the Plan?
68
Quick Reference Guide
69
Initial Response Plans
71
Communications
71
Detailed Execution Procedures
72
The Human Factor
73
Administrative Support
74
Logistics
75
Finance Issues
75
Transition Back to Normal Operations
76
Distribution of the Plan
77
Plan-Maintenance Strategies
77
Using the Sample Plan
78
CHAPTER 10 Training and Awareness Programs
The Question
81
Different Training for Different People
82
CHAPTER 11 Testing the Recovery Plan
First Rule of Testing Your Plan
86
Types of Testing
86
Planning the Exercise: Exercise Checklist
91
Logistics Tasks
92
Getting Ready to Test
92
Exercise Begins
93
Post-exercise Tasks
94
Recovery-Team Review
94
Publishing the Results
95
Data-Center Exercise Reporting
95
Change Control
98
Test Schedules
98
CHAPTER 12 Coordinating with Public Agencies
What You Can Expect From Public Agencies
99
Whom You Should Have Relationships with Before There is a Crisis
99
How to Engage Them in Your Program
100
CHAPTER 13 Crisis Management/Event Management
Event Management
103
When an Event Becomes a Crisis
110
Leadership in Crisis
110
Problem Management
114
CHAPTER 14 Crisis Communications
Recovery Communications
115
Employee Notification
116
Communications Among and to Your Recovery Teams
117
Using Conference Bridges
119
Communications to Customer, Clients, and Vendors
119
Handling the Media
120
Work You can do Before an Event
122
CHAPTER 15 Pandemic Planning
An Influenza Tutorial
125
Pandemics in the Last Century
128
So What Is Bird Flu and Why Are We Worried?
130
HINI Flu
132
Economic Impacts of a Pandemic
135
Public Health Law and Quarantine
136
Pandemic Planning Assumptions from the CDC
136
Why is this Plan Different?
138
Human-Resources Policy Changes
142
CHAPTER 16 Life Safety
What Is Life Safety?
145
Floor/Fire Wardens
146
Fires and Evacuation Drills
147
Assembly Areas
148
Using Fire Extinguishers—Why I Don't
149
How Often to Conduct Drills
150
Shelter in Place
151
Tornados and Tornado Drills
153
Workplace Violence
156
CHAPTER 17 Transitioning from Project to Program
The Components of the Contingency-Planning Program
164
Annual Program Business Requirements
165
Annual Technology-Program Requirements
171
Annual Crisis Leadership Program Requirements
171
Emergency Operations Center
172
Program Roles and Responsibilities
172
Corporate Contingency Planning
172
Business-Continuity Planners
173
The Leadership Team
176
Key Leadership-Team Responsibilities
176
Contingency Planning
176
Information Security
176
Human Resources
178
Corporate Communications
178
Security Services
178
Technology Services
179
Corporate Real Estate/Facilities
180
Corporate Risk and Insurance
180
Corporate Legal/Compliance
181
Logistics
181
Business
182
Administrative Support
182
CHAPTER 18 Industry Certifications Proffesionalization
DRII—The Institute for Continuity Management
186
BCI—The Business Continuity Institute
188
CHAPTER 19 Disaster Planning at Home
Be Ready When Disaster Strikes You Personally
191
Family Emergency Plan
192
CHAPTER 20 The Regulatory Environment
Legal and Regulatory Requirements
196
Regulations for Financial Institutions
196
Sarbanes Oxley—Section 404 Management Assessment of Internal Controls
198
Legal Standards
198
CHAPTER 21 Tools, Software, Recovery Contracts, Consultants and Other Matters
Communication Tools
201
Communication Methods
201
Planning Tools
204
Third-Party Recovery Sites
205
Using Consultants
207
CHAPTER 22 Summary and Lessons Learned from Real Events
Lessons Learned from Real Recoveries
209
September 11, 2000
209
September 11, 2001
212
The Recovery from Hurricane Katrina
224
It's All About the People
226
Conclusion
228
One Step at a Time
228
The Future of Business Continuity
230
APPENDIX A Sample Business-Resumption Plan
Introduction
233
Quick Reference Information in an Emergency
236
Gather
236
Assess
236
Decide
237
Mobilize
237
Communicate
238
Recover
238
Executive Overview
239
Executive Signoff
240
Plan Maintenance History
241
Sample Purpose, Objectives, and Assumptions
241
Purpose of the Plan
241
Objectives of the Plan
241
Plan Overview
242
Assumptions
243
Recovery Strategies
244
Recovery Management
245
Executive Emergency-Management Team
245
Emergency-Management Team for Each Site
246
Response Teams for Each Site
246
Command Centers
247
Human-Resource Management
248
Injury to Employee
248
Employee Fatalities
248
Temporary Help/Contractors
249
Employees Under Stress
249
Family Issues
249
Administrative Support
250
Food, Travel, Lodging
250
Travel by Team Members/Travel Arrangements
251
Finance Issues
251
Equipment Purchases
251
Expense Reports
252
Cash Advances
252
Recovery Communications
252
Employee Notification
252
Internal Business-Unit Communications
252
External Communications—Media
253
External Communications—Customers/Clients
253
Recovery Status Updates
253
Problem Management
253
Communications with Recovery Team
254
Conference Bridges
254
Site Recovery
254
Plan-Activation Procedures
256
Emergency Alert
256
Damage Assessment
256
Notification Procedures
257
Command-Center Activation
257
Sample Checklists for Management Team and Response Team
258
Executive Emergency-Management Team Procedures
258
Emergency-Management Team Procedures/Emergency-Management Team Leader
259
Emergency-Management Team Procedure/Site-Management Team Leader
260
Emergency-Management Team Procedures/Response-Team Leader
261
Emergency-Management Team Procedures/Human-Resources Representative
262
Emergency-Management Team Procedures/Finance Representative
263
Emergency-Management Team Procedures/Systems-Team Leader
264
Emergency-Management Team Procedures/Client-Relationship Representative
264
Emergency-Response Team/Response-Team Leader/Site
265
Emergency-Response Team/ Critical-Function Team Leader/Site Recovery
266
Emergency-Response Team/LAN-Recovery-Team Leader/Site Recovery
268
Emergency-Response Team/Systems Team/Site
269
Emergency-Response Team/Offsite-Storage Leader/Site Recovery
270
Emergency-Response Team/Critical-Function-Recovery Team/Site Recovery
271
Emergency-Response Team/Facilities Team/Site Recovery
272
Recovery Plan for Loss of Business Applications
272
Loss of Data Center Plan-Activation Checklist
273
Plan Activation
275
Emergency Alert
275
Impact Assessment
275
Notification Procedures
275
Command-Center Activation
276
Appendix A: Disaster Declaration Procedures
277
Appendix B: Offsite Procedures
277
Appendix C: Call-Notification Script
278
Appendix D: Recovery Locations and Travel Directions
279
Appendix E: Hotels near the Recovery Facility
279
Appendix F: Caterers near the Recovery Facility
279
Appendix G: Food Request
280
Appendix H: Travel and Accommodations Request Form
280
Appendix I: Business Function Recovery Order of Priority
281
Appendix J: Internal Business Systems Priority
281
Appendix K: Updating the Corporate Contingency Information Line
282
Appendix L: Problem Reporting/Change-Management Procedure
282
Appendix M: Purchase Requisition
283
Appendix N: Cash-Advance Form
283
Appendix O: Contractor/Temporary Reassignment Staffing Form
284
Appendix P: Injury Report Form
284
Appendix Q: Conference Bridges
285
Appendix R: Inbound 800 Service
285
Safety and Emergency Procedures
285
There is a Fire
285
There is Severe Weather
285
Evacuation of Your Area is Announced
286
Medical Assistance is Needed
286
You Receive a Bomb Threat
287
An Unauthorized Person is in Your Workspace
287
A Suspicious Package is in Your Workspace
287
There is a Threat of Workplace Violence
288
APPENDIX B Sample Initial-Response Plan for small sites
Business-Continuity Planners
290
ERO—Event-Managennent Team
290
Floor Wardens
290
Establish Conference-Bridge Procedures
291
Identify Functions
291
Severe Weather and Other Limited Site Events
292
Where to Go if You Cannot Get Back into Your Building
292
Alternate-Site Locations for Office
293
Seat Assignments at the Alternate Sites
293
Alternate-Site Declaration—Corporate Alternate Sites
294
Disaster Declaration Procedures
296
Safety and Emergency Procedures
296
There is a Fire
296
There is Severe Weather
296
Evacuation of Your Area is Announced
297
Medical Assistance is Needed
297
You Receive a Bomb Threat
298
An Unauthorized Person is in Your Workspace
298
A Suspicious Package is in Your Workspace
298
There is a Threat of Workplace Violence
299
APPENDIX C Test-Planning Guide Sample Test Plan for Business-Unit Exercises at an Alternate Site
Exercise Checklist
301
Alternate-Site Test Plan Sample for Business-Unit Testing
303
Contingency Planning Test Plan—Alternate Site
303
Driving Directions to the Alternate Site
304
Timeline
304
Participants
305
Alternate-Site Floor Plan
305
Calls to be Rerouted
305
Communication Conference Bridge
305
Problem Reporting
305
Action Items from Test
306
Problem-Reporting Tickets
306
Test Participant Survey
306
Test Evaluation
308
APPENDIX D Test Scenarios 311
APPENDIX E Alternate-Site Development Kit 313
APPENDIX F Business-Continuity-Planner job Description
Purpose
317
Goal
317
Duties and Responsibilities
318
Knowledge and Skills
319
Education/Experience
319
Accountabilities
319
Organizational Relationships
319
Index 321
Okolita, Kelley