University of Colorado at Boulder University of Colorado at Boulder Business Continuity and Recovery Plan 4/5/2002 Important: Be sure to "save" your work frequently to avoid loss of data. Select the desired Tab (below) to proceed. Date Revised: Section(s) Revised: Please complete the information below: Department Name: Operating Unit: Prepared By: Date Prepared: $ASQExample of a DRP Planning Template.xls -1/28/2008 Cover PageUniversity of Colorado at Boulder $ASQExample of a DRP Planning Template.xls -1/28/2008 Cover PageUniversity of Colorado at Boulder Business Continuity and Recovery Plan for: Note: This Excel workbook has been designed to assist you in preparing your Business Continuity & Business Recovery Plan. Please refer to the Planning Handbook for specific instructions. Click on the Tabs at the bottom of this worksheet to display the templates you wish to complete: See Tab Below Contents of this Worksheet : Narrative Plan Narrative: Use this section for brief planning narrative, if needed. 1. Critical Business Functions: There are three (3) separate areas to list: Products Services Administrative & Regulatory functions 2. Prioritize Functions. Prioritize the Functions listed in step 1, with the most essential activity being priority number one. Then, develop recovery time objectives for each prioitized function. 3. Assets Required (One Work Sheet for each Critical Function listed on Sheet 1) Identify all Assets required and any shortfalls for accomplishing each Recovery Time Objective for Critical Functions. Note: if you have more that 6 Critical Functions you will need to add duplicate worksheets Other Templates: Personnel Template for Listing personnel Salvage Salvage Team Listing Vulnerability Salvage Team Listing $ASQExample of a DRP Planning Template.xls -1/28/20081/28/2008 University of Colorado at Boulder Business Continuity and Recovery Plan for: Planning Narrative: $ASQExample of a DRP Planning Template.xlsUniversity of Colorado at Boulder List the critical business functions that your organization performs for the University by the categories indicated below: (1. Products, 2. Services, 3. Administrative & Regulatory) 1. PRODUCTS: Name /Description Customers Volume Frequency Result of Non-Delivery 2. SERVICES: Name /Description Customers Volume Frequency Result of Non-Delivery 3. Administrative & Regulatory Name /Description Customers Volume Frequency Result of Non-Delivery Business Continuity and Recovery Plan Critical Business Functions Step 1 $ASQExample of a DRP Planning Template.xls,1/28/2008 5 of 20University of Colorado at Boulder Prioritized Functions Step 2 Catagorize those activities performed by your organization identified in Step One using the following criteria: · CRITICAL -Immediately essential to the critical functions of the University. · RECOMMENDED -Not immediately essential to University critical functions but recommended to be continued. · NON-ESSENTIAL -Not essential to critical functions of the University that may be temporarily discontinued. · POTENTIAL for CONTRACTOR -List the functions that could be provided by an outside contracoor > For each critical function catagorized below determine the Level of Service to be Restored And the specific Prioritize the activities within those catagories, with the most essential activities being priority number one. Recovery Time Objectives (RTO's) that states how soon each function must be resumed. Critical Functions Priority Activity Other Org Performing /Capable of Performing Activity Location Service Level to be Restored Objective Time Other Remarks RECOMMENDED Priority Activity Other Org Performing /Capable of Performing Activity Location Service Level to be Restored Objective Time Other Remarks NON-ESSENTIAL Priority Activity Other Org Performing /Capable of Performing Activity Location Service Level to be Restored Objective Time Other Remarks POTENTIAL for CONTRACTOR Priority Activity Name /Location /Contact Contract Status Service Level to be Restored Objective Time Other Remarks Business Continuity and Recovery Plan $ASQExample of a DRP Planning Template.xls -1/28/2008 6 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Identify and list all assets required to meet the Recovery Time Objectives for EACH CRITICAL FUNCTION listed in Step 2 -include all assets that are necessary: (e.g. personnel, alternate work site and space, computers, communications & other equipment, mail & transportation services, warehousing, power & utilities, data storage & access, physical distribution and any other special requirements.) Critical Function -1 -(from Step2) : Quantity required Available? Personnel Jobs/Skills Required: in units (e.g. 3 F.T.E.) Location Yes or No Names of the people in Job Class/Skill Contact Numbers (home, cell, pager, etc) Remarks, consequences, alternatives, etc.: Work Area/Space Required # of People to accommodate/Available? Square Feet Required Location Yes or No Special site requirements: Possible alternatives Remarks Available? Equipment, Supplies & Services: Quantity/Frequency required Location Yes or No Names of Suppliers, Contractors Contact Numbers (home, cell, pager, etc) Remarks $ASQExample of a DRP Planning Template.xls 7 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Identify and list all assets required to meet the Recovery Time Objectives for EACH CRITICAL FUNCTION listed in Step 2 -include all assets that are necessary: (e.g. personnel, alternate work site and space, computers, communications & other equipment, mail & transportation services, warehousing, power & utilities, data storage & access, physical distribution and any other special requirements.) Critical Function -2 (from Step2) : Quantity required Available? Personnel Jobs/Skills Required: in units (e.g. 3 F.T.E.) Location Yes or No Names of the people in Job Class/Skill Contact Numbers (home, cell, pager, etc) Work Area/Space Required # of People to accommodate/Available? Square Feet Required Location Yes or No Special site requirements: Possible alternatives Available? Equipment, Supplies & Services: Quantity/Frequency required Location Yes or No Names of Suppliers, Contractors Contact Numbers (home, cell, pager, etc) $ASQExample of a DRP Planning Template.xls, 1/28/2008 8 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Critical Function -2 (from Step2) : Personnel Jobs/Skills Required: Work Area/Space Required Equipment, Supplies & Services: Remarks, consequences, alternatives, etc.: Remarks Remarks $ASQExample of a DRP Planning Template.xls, 1/28/2008 9 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Identify and list all assets required to meet the Recovery Time Objectives for EACH CRITICAL FUNCTION listed in Step 2 -include all assets that are necessary: (e.g. personnel, alternate work site and space, computers, communications & other equipment, mail & transportation services, warehousing, power & utilities, data storage & access, physical distribution and any other special requirements.) Critical Function -3 (from Step2) : Quantity required Available? Personnel Jobs/Skills Required: in units (e.g. 3 F.T.E.) Location Yes or No Names of the people in Job Class/Skill Contact Numbers (home, cell, pager, etc) Work Area/Space Required # of People to accommodate/Available? Square Feet Required Location Yes or No Special site requirements: Possible alternatives Available? Equipment, Supplies & Services: Quantity/Frequency required Location Yes or No Names of Suppliers, Contractors Contact Numbers (home, cell, pager, etc) $ASQExample of a DRP Planning Template.xls, 1/28/2008 10 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Critical Function -3 (from Step2) : Personnel Jobs/Skills Required: Work Area/Space Required Equipment, Supplies & Services: Remarks, consequences, alternatives, etc.: Remarks Remarks $ASQExample of a DRP Planning Template.xls, 1/28/2008 11 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Identify and list all assets required to meet the Recovery Time Objectives for EACH CRITICAL FUNCTION listed in Step 2 -include all assets that are necessary: (e.g. personnel, alternate work site and space, computers, communications & other equipment, mail & transportation services, warehousing, power & utilities, data storage & access, physical distribution and any other special requirements.) Critical Function -4 (from Step2) : Quantity required Available? Personnel Jobs/Skills Required: in units (e.g. 3 F.T.E.) Location Yes or No Names of the people in Job Class/Skill Contact Numbers (home, cell, pager, etc) Work Area/Space Required # of People to accommodate/Available? Square Feet Required Location Yes or No Special site requirements: Possible alternatives Available? Equipment, Supplies & Services: Quantity/Frequency required Location Yes or No Names of Suppliers, Contractors Contact Numbers (home, cell, pager, etc) $ASQExample of a DRP Planning Template.xls, 1/28/2008 12 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Critical Function -4 (from Step2) : Personnel Jobs/Skills Required: Work Area/Space Required Equipment, Supplies & Services: Remarks, consequences, alternatives, etc.: Remarks Remarks $ASQExample of a DRP Planning Template.xls, 1/28/2008 13 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Identify and list all assets required to meet the Recovery Time Objectives for EACH CRITICAL FUNCTION listed in Step 2 -include all assets that are necessary: (e.g. personnel, alternate work site and space, computers, communications & other equipment, mail & transportation services, warehousing, power & utilities, data storage & access, physical distribution and any other special requirements.) Critical Function -5 (from Step2) : Quantity required Available? Personnel Jobs/Skills Required: in units (e.g. 3 F.T.E.) Location Yes or No Names of the people in Job Class/Skill Contact Numbers (home, cell, pager, etc) Work Area/Space Required # of People to accommodate/Available? Square Feet Required Location Yes or No Special site requirements: Possible alternatives Available? Equipment, Supplies & Services: Quantity/Frequency required Location Yes or No Names of Suppliers, Contractors Contact Numbers (home, cell, pager, etc) $ASQExample of a DRP Planning Template.xls, 1/28/2008 14 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Critical Function -5 (from Step2) : Personnel Jobs/Skills Required: Work Area/Space Required Equipment, Supplies & Services: Remarks, consequences, alternatives, etc.: Remarks Remarks $ASQExample of a DRP Planning Template.xls, 1/28/2008 15 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Identify and list all assets required to meet the Recovery Time Objectives for EACH CRITICAL FUNCTION listed in Step 2 -include all assets that are necessary: (e.g. personnel, alternate work site and space, computers, communications & other equipment, mail & transportation services, warehousing, power & utilities, data storage & access, physical distribution and any other special requirements.) Critical Function -6 (from Step2) : Quantity required Available? Personnel Jobs/Skills Required: in units (e.g. 3 F.T.E.) Location Yes or No Names of the people in Job Class/Skill Contact Numbers (home, cell, pager, etc) Work Area/Space Required # of People to accommodate/Available? Square Feet Required Location Yes or No Special site requirements: Possible alternatives Available? Equipment, Supplies & Services: Quantity/Frequency required Location Yes or No Names of Suppliers, Contractors Contact Numbers (home, cell, pager, etc) $ASQExample of a DRP Planning Template.xls, 1/28/2008 16 of 20University of Colorado at Boulder Business Continuity and Recovery Plan Assets Required to Meet Time Objectives of Critical Function Step 3 (1 sheet for each critical function) Critical Function -6 (from Step2) : Personnel Jobs/Skills Required: Work Area/Space Required Equipment, Supplies & Services: Remarks, consequences, alternatives, etc.: Remarks Remarks $ASQExample of a DRP Planning Template.xls, 1/28/2008 17 of 20Business Continuity and Recovery Plan List of Personnel Skills & Contact Numbers Employee Name Work cell Pager Home Department Classification Job Title Other SkillsUniversity of Colorado at Boulder Business Continuity and Recovery Plan Personnel: Name Address Phone Number /Pager Contractors/Vendors: (Add any which may assist with salvage operations) Name Address Phone /Fax Number Priority of Equipment for Salvage: Description Quantity Location Priority of Supplies for Salvage: Description Quantity Location Salvage Team $ASQExample of a DRP Planning Template.xls 19 of 20University of Colorado at Boulder Business Continuity and Recovery Plan TOTAL TYPE OF EMERGENCY PROBABILITY HUMAN PROPERTY BUSINESS INTERNAL EXTERNAL 00 High -----> Low High ----------------------------------------------------->Low Weak -----------> Strong 5 -1 5 1 5 -1 RESOURCES IMPACT Vulnerability Analysis $ASQExample of a DRP Planning Template.xls 20 of 20