BCP/DR Frameworks

Question 1

NIST SP 800-34

Answer 1

provides instructions, recommendations, and considerations to assist federal organizations in developing and maintaining effective contingency plans.

Question 2

ISO/IEC 27031

Answer 2

Information technology — Security techniques — Guidelines for information and communication technology readiness for business continuity

Question 3

BS -25999/ISO 22301

Answer 3

ISO 22301 will supersede the original British standard, BS 25999-2, and builds on the success and fundamentals of this standard. BS ISO 22301 specifies the requirements for setting up and managing an effective business continuity management system (BCMS) for any organization, regardless of type or size.

Question 4

BCI (Business Continuity Institute)

Answer 4

When business is disrupted, it can cost money. Lost revenues plus extra expenses mean reduced profits. Insurance does not cover all costs and cannot replace customers that defect to the competition. A business continuity plan to continue business is essential. The development of a business continuity plan includes four steps: