Continuity of Operations 5.6

Question 1

Tabletop Exercises

Answer 1

Performing a full-scale disaster can be costly and time consuming. Many of the logistics can be determined through analysis. Get key players together for a tabletop exercise. Talk through a simulated disaster.

Question 2

The Scope

Answer 2

You need to have an idea of how big and complex this will be. Do you need to invite local first responders or just discuss internally? Determine the scope of the disaster. Water main break, death and injuries? Involve everyone, perhaps make the discussion a surprise. Don’t assume every piece of info will be available during the exercise.

Question 3

After-Action Report (AAR)

Answer 3

We can evaluate everything after once we understand the scope and endgame objectives. Make sure to include details about what worked well, and what didn’t work at all and how to fix it for next time.

Question 4

Failover

Answer 4

Many orgs will have a disaster recovery site that is prepped. This site may need to be up and running for weeks or even months. This transition process must be documented to/from the recovery site.

Question 5

Alternate Business Practices

Answer 5

Not everything will go according to plan, disasters can cause a disruption to the norm. We rely on computer systems. There may need to be alternative manual options to keep track of things. These must be documented and tested before a problem occurs.