IT Examiner School - Oct 2023

Internal Use Only

Components of the DR / BCP (continued) Components of the plan should include: • Logistical arrangements (e.g., housing, transportation, or food) for personnel at the recovery locations. • Network equipment, connectivity, and communication needs, including entity ‐ owned and personal mobile devices. • Personnel at alternate sites, including arrangements for those permanently

located at the alternate facility. • Scope and frequency of testing. • Resumption of a normalized state for business processes.

7

Internal Use Only

Business Impact Analysis (BIA) Management should develop a BIA that:

• Identifies all business functions and prioritizes them in order of criticality; • Analyzes related interdependencies among business processes and systems; and • Assesses a disruption’s impact through established metrics.

The BIA should define recovery priorities and resource dependencies for critical processes

8