Re: framework/checklist for considering drp/bcp

Posted by Philip Jan Rothstein, FBCI (24.151.17.54) on July 11, 2001 at 16:43:04:

In Reply to: framework/checklist for considering drp/bcp posted by HS Tan on July 11, 2001 at 16:27:34:

: Posted by hs tan on April 24, 2000 at 05:01:29:

: Disaster Recovery Planning is becoming increasingly complex and costly. From a traditional mainframe focus it has now branched to include heterogeneous systems such as Unix, AS/400, HP and PC/LAN systems. Management sees DRP or the more widely used term BCP as only for insurance in case of disaster where even the occurrence is likely to be remote.

: Question :

: 1. How to draw the line where BCP is necessary ?
: 2. What are the main considerations in deciding
: whether any application/system merits DRP/BCP ?
: 3. Is there any framework or guideline out there
: where reference can be made or advice obtained ?

: The main issue here is - how to contain cost and at the
: same time ensure the organisation can survive with a
: BCP ?

: Would appreciate very much any comments on the matter.

: Thank you.

- - - - - -

1. In my opinion BCP is ALWAYS necessary - the only question is the degree of investment which is relevant and appropriate.

2. The main considerations in deciding whether any application/system merits DRP/BCP is the Business Impact Assessment process - a structured, objective analysis of business priorities and exposure to loss from disruption.

Often, elaborate business continuity programs are not necessary for specific business functions or areas, where the exposure to loss is minimal.

3. Even where the probability of a disruptive event is negligible, it should never be assumed the probiability is zero.

You're not alone in wanting "...to contain cost and at the
same time ensure the organisation can survive with a
BCP." My advice would be:

1. Look for mitigation as well as recovery strategies which apply to a broad variety of potential threats and vulnerabilities

2. Invest in prevention at least as much as in recovery

3. Exercise rigorously. View exercises as a means to validate the recovery capabilities, i.e., to prove your investments are going to pay off.

- Philip Jan Rothstein, FBCI

Follow Ups:

vyaxshfo - vyaxshfo 00:07:22 12/11/07 (0)
Re: framework/checklist for considering drp/bcp adsf 15:09:41 06/21/05 (0)
Re: framework/checklist for considering drp/bcp Juan Jose Resendiz Silva 15:39:30 02/16/05 (0)
searching for the friends john 14:45:12 11/03/04 (0)
Re: framework/checklist for considering drp/bcp Timothy Cousins 20:58:24 07/11/01 (1)
- searching for the friends john 15:54:43 11/03/04 (0)
Re: framework/checklist for considering drp/bcp Timothy Cousins 16:44:34 07/11/01 (0)

Post a Followup

Name:
E-Mail:

Subject:

Comments:
: : Posted by hs tan on April 24, 2000 at 05:01:29: : : Disaster Recovery Planning is becoming increasingly complex and costly. From a traditional mainframe focus it has now branched to include heterogeneous systems such as Unix, AS/400, HP and PC/LAN systems. Management sees DRP or the more widely used term BCP as only for insurance in case of disaster where even the occurrence is likely to be remote. : : Question : : : 1. How to draw the line where BCP is necessary ? : : 2. What are the main considerations in deciding : : whether any application/system merits DRP/BCP ? : : 3. Is there any framework or guideline out there : : where reference can be made or advice obtained ? : : The main issue here is - how to contain cost and at the : : same time ensure the organisation can survive with a : : BCP ? : : Would appreciate very much any comments on the matter. : : Thank you. : : - - - - - - : 1. In my opinion BCP is ALWAYS necessary - the only question is the degree of investment which is relevant and appropriate. : 2. The main considerations in deciding whether any application/system merits DRP/BCP is the Business Impact Assessment process - a structured, objective analysis of business priorities and exposure to loss from disruption. : Often, elaborate business continuity programs are not necessary for specific business functions or areas, where the exposure to loss is minimal. : 3. Even where the probability of a disruptive event is negligible, it should never be assumed the probiability is zero. : You're not alone in wanting "...to contain cost and at the : same time ensure the organisation can survive with a : BCP." My advice would be: : 1. Look for mitigation as well as recovery strategies which apply to a broad variety of potential threats and vulnerabilities : 2. Invest in prevention at least as much as in recovery : 3. Exercise rigorously. View exercises as a means to validate the recovery capabilities, i.e., to prove your investments are going to pay off. : - Philip Jan Rothstein, FBCI

Enter these letters (required):

Optional Link URL:
Link Title:
Optional Image URL:

[ Follow Ups ] [ Post Followup ] [ Rothstein Associates Inc. Disaster Recovery Forum ] [ FAQ ]

"Keep Me Posted"

Business Survival Newsletter

Rothstein Associates, Inc. is a BBB Accredited Business. Click for the BBB Business Review of this Financial Planning Consultants in Brookfield CT

E-mail Rothstein Associates Inc.