Posts Tagged ‘business continuity planning’

Five Strategies For Business Survival

Sunday, September 18th, 2011

Business owners invest a tremendous amount of time, money and resources to make their ventures successful, yet emergency planning may get placed on the back burner in the face of more immediate business concerns.

At some point, your business will be disrupted by either a man-made or natural disaster; it’s not a matter of if, but when. Disaster recovery planning is vital to the longevity of the business.

Natural disasters like hurricanes, tornadoes and floods are particularly tricky to plan for because they can strike randomly and sometimes repeatedly in the same geographic location.

So how would a business survive such extreme threats?  Here are a few leading practices and strategies to help:

  1. Awareness:  A critical activity of Business Continuity actually occurs before the crisis. Informing and educating employees about programs, threats, expectations, accepted behaviors and actions will increase the likelihood that the intended response to an emergency will be achieved by making these situations at least a bit more familiar by way of repetition.
  2. Compliance:  Compliance with building code safety and frequent building code inspection checks are imperative to ensuring that your building is as safe as possible. The same method should be applied to information technology. Extreme caution should be taken when it comes to protecting your most valuable business resources.
  3. Redundancy: A variety of sources for accessing information should be available. Emails, website postings, “800” numbers to recorded messages, face-to-face information sessions, newsletters, and texting are viable methods.
  4. Frequency: During crises information changes quickly. Therefore, it is important to update messages frequently. Having a pre-established update schedule will benefit your organization during the business interruption.
  5. Communications: Often times at the beginning of a crisis there is a flurry of information, which then drops off. Crises can last for a while and people need different types of information from stage to stage. Maintaining communications continuity during all stages of a crisis is critical.

Patrick R. Dunn, CBCP, CISSP
Practice Manager – Disaster Recovery & Business Continuity

The Difference Between Business Continuity and Disaster Recovery

Thursday, March 24th, 2011

Oftentimes, the terms business continuity and disaster recovery are used interchangeably. However, there is a definitive difference between the two and one cannot exist without the other.

Business Continuity (BC) – Think Proactive
Business Continuity is a proactive strategy to recoverability and has evolved to focus on the people side of a disaster.  Many organizations account for technical recovery but neglect the impact on the people involved. Having your systems available does no good if your people have no place to work, or no manual processes in place to get their job done.  Thus Business Continuity looks at the financial impacts of downtime (Business Impact Analysis), managing the event (Crisis Management) and Business Resumption Plans.

Disaster Recovery (DR) – Think Reactive
Disaster recovery planning, on the other hand, is a more reactive approach to recovery and has evolved to focus on the data center/ information technology aspects of an organization.  In essence it is the technical recovery side of a “disaster” — the recovery of systems and applications that enable the business to continue to operate.  DR is the factor that makes the critical difference between the organizations that can successfully manage crises with minimal cost, effort and maximum speed versus those that are left picking up the pieces for untold lengths of time at whatever cost providers decide to charge. (I.E. Organizations forced to make decision out of desperation.)

Detailed disaster recovery plans can prevent many of the headaches experienced by an organization in times of disaster. By having practiced plans, not only for equipment and network recovery, but plans that precisely outline what steps each person involved in recovery efforts should undertake, an organization can improve recovery time and minimize disruptive downtime.

Today’s best practices dictate that companies establish a Business Continuity Program that encompasses both technical and business recovery programs.  The technical aspect is handled by IT and is called Disaster Recovery.  The business side carries the moniker Business Continuity.  Both are required components of a comprehensive recoverability strategy.

Patrick R. Dunn, CBCP, CISSP
Practice Director – Disaster Recovery & Business Continuity