The four steps in IR planning are: IR preplanning, Incident Detection, Incident Reaction, and Incident Recovery. IR Preplanning involves the development of all three sets of procedures listed above.
Incident Detection is determining whether an incident is caused by routine systems use or an actual incident. Incident classification is used to help determine this.
Incident Reaction involves the response to an actual incident. Notification of key personnel, incident
documentation, and incident containment strategies.
Incident Recovery is conducted after the incident has been contained and control of the systems has been regained. This step involves incident damage assessment, restoring the data and/or services if needed, continuously monitoring the systems, and restoring the confidence of the organization's stakeholders.
Why do companies or organizations use continuity business plan?
A business continuity plan positions your organization to survive serious disruption. It eliminates confusion common to every disaster, providing a clear blueprint for what everyone should do. More importantly, your business continuity plan supports: Communication between employees and customers.
What are the types of business continuity plan?
As discussed earlier, there are five types of business continuity plans: crisis management, crisis communications, emergency response, IT disaster recovery, and business continuity. However, some organizations may combine plans into a single document.
Who is involved in a business continuity plan?
Many organizations assign a business continuity manager who will be responsible for leading the planning and preparedness process as well as executing the plan during an incident. One of their biggest responsibilities is to assemble a suitable team and governance system.
Who should set the policy for the contingency planning process?
A formal department or agency policy provides the authority and guidance necessary to develop an effective contingency plan. 2. Conduct the business impact analysis (BIA). The BIA helps identify and prioritize the critical IT systems and components.