BCP Self-Assessment Checklist

BUSINESS CONTINUITY PROGRAM SELF-ASSESSMENT CHECKLIST ON CD-ROM
by Edmond D. Jones

===============================================

Published by The Rothstein Catalog On Disaster Recovery.
In stock for immediate shipment.

===============================================

Contains over 375 questions to accomplish an internal assessment of your business
continuity program.

===============================================

This book contains a comprehensive set of questions assess the status of an organization's
business continuity program. The questions may be used by a new or experienced business
continuity planner to assess the overall program to determine those areas needing work. The
same checklists can be used by internal or external audit or by others having a responsibility
for evaluating an organization's business continuity program.

The questions cover the major aspects of the typical business continuity program:
- Policy
- Business Impact Assessment
- Recovery Strategies
- Plan Phases
- Outsourced Functions
- Off-Site Storage
- Training

===============================================

TABLE OF CONTENTS

Introduction
Checklists
Policy
Business Impact Assessment (BIA)
Recovery Strategies
Disaster Response
Plan for Continuity and Recovery
Plan for Restoration
Post Restoration
Plan Exercises
Plan Maintenance and Distribution
Training
Other
Outsourced Business Functions
Outsourced Information Systems Operations
Associate Benefits
Backup and Recovery


===============================================

EXCERPT:

OUTSOURCED BUSINESS FUNCTIONS

Question Yes No NA

1. Is BCP included in the contract as a requirement for the vendor providing the service?

2. Is exercising of the BCP on an annual basis included in the contract as a requirement for
the vendor providing the service?

3. Does your organization participate in the annual exercises of the BCP?

4. Has the vendor provided a plan extract for a disaster event at their facility that:
Identifies key contacts within your organization?

Provides a vendor point-of-contact to update information contained in the plan?
Contains provisions for your organization to request the vendor implement the plan?

Documents all assumptions being made by the vendor?

Documents pre-disaster actions your organization is expected/required to accomplish for the
plan to operate as expected when implemented?


Documents actions your organization is expected/required to accomplish when the plan is
implemented?

Documents when the BCP would be implemented following an interruption of service (time
from the event to declaration of a disaster)?

Identifies when to expect restored service (time from the loss of service until service is
available to the user)?

Identifies individual contacts and contact procedures for the coordination of actions when the
plan is activated?

5. Have you coordinated with your vendor(s) to detail the support that you expect should the
disaster event impact your facility?

6. Has the vendor provided a plan extract for a disaster event occur at your facility that:

Identifies key contacts within their organization?

Provides a vendor point-of-contact to update information contained in the plan?

Contains provisions for your organization to request the vendor implement the plan?

Documents all assumptions being made by the vendor?

Documents pre-disaster actions your organization is expected/required to accomplish for the
plan to operate as expected when implemented?

Documents actions your organization is expected/required to accomplish when the plan is
implemented?

Identifies when to expect restored service (time from the loss of service until service is
available to the user)?

Identifies individual contacts and contact procedures for the coordination of actions when the
plan is activated?

7. Is the contact information for your organization contained in the vendor plan extracts
reviewed at least annually to ensure that it is accurate?

8. Do the key contacts in the vendor plan extracts know their roles and duties should the
vendor's BCP be implemented?

9. Have the pre-disaster actions expected/required by the vendor been accomplished?

10. Have actions your organization is expected/required to accomplish when the vendor's plan
is implemented been incorporated into your BCP?

===============================================

ABOUT THE AUTHOR:

EDMOND D. JONES is certified as a Master Business Continuity Planner (MBCP) by the
Disaster Recovery Institute, International. His involvement with continuity planning began in
1964 and continued throughout his 20-year military career. This experience included planning
for various types of organizations, including data processing organizations. Working in the
commercial sector since 1985, he has assisted 100's of businesses in the United States and
Canada in defining and establishing their business continuity programs and plans. Mr. Jones
has been an instructor for the Disaster Recovery Institute, International; assisted in
development of the Institute's Professional Practices; and, was responsible for designing the
review course for candidates preparing for the MBCP examination. In addition, Mr. Jones was
one of the first members of the Disaster Recovery Institute to be elected to serve on the
Institute's Certification Board. Mr. Jones has had articles published in the Disaster Recovery
Journal and been an expert source for articles in ComputerWorld and the Law Office
Administrator.

===============================================

Published by THE ROTHSTEIN CATALOG ON DISASTER RECOVERY.
In stock for immediate shipment.

ISBN # 1-931332-07-X

===============================================
2001, 43 pages, CD-ROM. Order #DR522.
===============================================

4 Arapaho Rd.

Brookfield, CT 06804-3104 USA

1-888-ROTHSTEin; (888.768.4783)

Telephone: 203.740.7444; 888.768.4783

Fax: 203.740.7401

"Keep Me Posted" Business Survival Newsletter