D-5.2

Question 1.

Hi Nikhil,

Good post. I would like to add a few more points to your post. Damage assessment is concerned with determining the nature and extent of damage caused to the system. It has to be done as quickly as possible while giving the safety of personnel the highest priority. Some of the things to be considered during the damage assessment procedure are the origin of the incident, the potential for causing additional damages, the area damaged due to the incident, damage caused to equipment or infrastructure, items that need replacement, estimated time for restoring the normal operations.

It is important to activate the disaster recovery methods or procedures only after the completion of thorough damage assessment. Depending upon the degree of damage caused, the disaster recovery committee members or a part of it will activate the disaster recovery planning. The results of activation planning are a list that has services and systems which needs restoration, interdependencies and the sequence of services restoration. Estimated time, reporting failures to the team leads, planning communication among different teams in the

Question 2.

Business Impact Analysis(BIA):

BIA is the activity in Business Continuity Management that identifies vital business functions and their dependencies. BIA defines the Recovery requirements for IT Services including Recovery Time Objectives, Recovery Point Objectives and minimum Service Level Targets for each IT Service.

The Business Process responsible for managing risks that could seriously impact the business. BIA safeguards the interests of key, reputation, brand, and value creating activities. The BIA Process involves reducing Risks to an acceptable level and planning for the recovery of business processes should a disruption to the business occur. BIA sets the objectives, scope, and requirements for IT Service Continuity Management.

Disaster Recovery Plan (DRP):

The Disaster Recovery Plan (DRP) deals with the restoration of computer systems with all attendant software and connections to full functionality under a variety of damaging or interfering external conditions. In daily practice Disaster Recovery Plan often refers to major disruption, such as a flooded building, fire or earthquake disrupting an entire installation. The issue of Business Continuity certainly arises when Disaster Recovery is required. In short, we can say that the Disaster Recovery Plan addresses the procedures to be followed during and after the loss whereas BCP is the preemptive process put in place in preparation for the handling of a disaster.

Business Continuity Planning (BCP):

Business Continuity Plan often refers to disaster recovery from a business point-of-view or dealing with simple daily issues, such as a failed disk failed server or the database, possibly a bad communications line. It is often referred to as the measure of lost time in an application, possibly a mission-critical application. The Business Continuity Plan (BCP) refers to the means by which loss of business may be avoided and it ought to define the business requirements for continuity of operations. It defines the business requirements for a Disaster Recovery Plan (DRP).

References:

Intrieri, Charles (10 September 2013). “Business Impact Analysis”. Flevy. Retrieved 29 September 2013.