Business Continuity & Disaster Recovery
Business Continuity Planning is the way an organization can prepare for and aid in Disaster Recovery (DR). It is an arrangement agreed upon in advance by management and key personnel of the steps that will be taken to help the organization recover should any type of disaster occur. Though personally, I do not like Business Continuity Planning (BCP) to be associated with DR. For me BCP is more about the continuity of business and not just IT.
Disaster Recovery (DR) is the process an organization uses to recover access to their software, data, and/or hardware that are needed to resume the performance of normal, critical business functions after the event of either a natural disaster or a disaster caused by humans.
Business Continuity/Disaster Recovery plans come in various forms, each reflecting the corporation's particular set of circumstances. It's about using the right people, processes, and technology.
What standards and framework context is provided for BCP/DR?
Standards/Frameworks:
The best practices and various business continuity standards that details the steps for best business continuity plan are many and one needs to balance all these standards/requirements to get it right.
The list below does not include popular ISO, NIST, and other standards. The few below are those which you may or may not know. They are very interesting to read.
Here is an exercise. Please check the frameworks below to see if your BCP/DR team has considered them. For more information please comment on LinkedIn or email charu.pel@einnosec.com.
e-InnoSec Initiated Project for Like Minded Security Professionals (www.einnosec.com)Standards/Frameworks
Which standards/frameworks are listed?
Standards/Frameworks
- NFPA 1600
- ANS/NZS 5050:2010 Business continuity – Managing disruption related Risk
- DRI Library
- BS25999
- ISO/IEC (various other standards)
The list is long but included few above to start the conversation.
Where can you check earlier e-InnoSec postings?
Please check the earlier postings from e-InnoSec Team (www.einnosec.com):
- https://www.linkedin.com/feed/update/urn:li:activity:6533692345538408448/
- https://www.linkedin.com/feed/update/urn:li:activity:6531139710239199232/
- https://www.linkedin.com/feed/update/urn:li:activity:6525881711706853376/
https://www.linkedin.com/feed/update/urn:li:activity:6525881711706853376/
Related Resources
Related Posts
Is Your Business Prepared? Key Steps for Disaster Recovery & Continuity Certification
Strengthen resilience by separating business continuity strategy from disaster recovery execution and aligning both to recognized standards.
Read More
Prevention, Detection, and Recovery from Cyberattacks - Part II
Use a practical incident-response checklist across preparation, detection, containment, eradication, recovery, and lessons learned.
Read More
NIST Implementation
Map security and continuity controls using a structured NIST implementation approach to improve readiness and reduce rework.
Read More
GRC Insights That Matter
Exclusive updates on governance, risk, compliance, privacy, and audits — straight from industry experts.