Q: Which one of the following actions might be taken as part of a business continuity plan? A. Restoring from backup tapes B. Implementing RAID C. Relocating to a cold site D. Restarting business operations Q: Who is the ideal person to approve an organization’s business continuity plan? A. Chief information officer B. Chief executive officer C. Chief information security officer D. Chief operating officer Purpose of a business continuity plan (BCP) 1. Guide the company’s disaster recovery teams 2. Identify disaster recovery personnel 3. Assess risks and impact 4. Provide the step-by-step protocols 5. Identify the location of critical data and assets 6. Prioritize emergency communications 7. Identify back-up locations and resources 8. Outline existing preventative measures 9. Find weaknesses and propose solutions Purpose of a Disaster Recovery Plan (DRP) 1. Prevention (pre-disaster) 2. Continuity (during a disaster) 3. Recovery (post-disaster) TOP TEN TIPS FOR BUSINESS CONTINUITY PLANNING: 1. Identify critical business functions 2. Remember the seven 'P's needed to keep your business operational 3. Understand and track past incidents with suppliers 4. Assess and understand vulnerabilities and weak points 5. Agree and document your plans 6. Make sure plans are communicated to key staff and suppliers 7. Try your plans out in mock scenarios 8. Expect the unexpected 9. Make sure your continuity plans are nimble and can evolve quickly 10. Make sure you're not just box-ticking