Refresh existing Business Continuity Plans and confirm:
- Plan management information, roles and responsibilities, and BCMT contacts of the organization has been documented.
- Organizational-level plan details have been completed.
Review Business Impact Analysis and verify:
- Process Recovery PREFERRED.
- Process details are complete.
- BIA impact assessment has been documented, and Recovery Time/Recovery Point Objectives are captured.
- Impact rating justification is complete.
For all critical processes, ensure:
- Critical staff members are listed.
- IT applications are documented and have application IDs (per CMDB).
- All listed applications have business-required RTO and RPOs.
- The process owner provided an impact justification for loss of technology.
Ensure Recovery Strategies:
- Are documented or created to support associated risks and to account for loss of technology.
Compliance Tracking, verify:
- Changes to BCP and BIA have been captured and documented and correlate appropriately with printed plans.
Provide Guidance and Expertise:
- Roles and responsibilities.
- Risk assessment and Business Impact Analyst (BIA) experience.
- Business continuity processes and procedures.
- Recovery strategy optimization.
Training and Business Continuity Awareness to ensure:
- Capability of BCP evergreen maintenance.
- Proficiency in utilizing BCP tool for making updates and printing reports.
- Process Recovery PREFERRED.