Your Federal Quarterly Tax Payments are due April 15th Get Help Now >>

Departmental Business Continuity Plan Template - DOC by BrittanyGibbons

VIEWS: 371 PAGES: 18

									Departmental Business Continuity Planning

Page 1 of 18

Business Continuity Planning Components Getting Started Section 1

1. Assign departmental business continuity responsibilities. 2. Department mission and business functions/processes. 3. Identification and evaluation of scenarios, risks, events and threats.

Developing the Plan

Section 2

4. Document recovery plans to recover critical functions for each scenario. 5. Determine details to complete tasks. 6. List contact information. 7. List necessary resources and reference materials.

Maintaining the Plan
8. Train personnel on the plan. 9. Test (validate) the plan. 10. Maintain the plan.

Section 3

Page 2 of 18

Getting Started Section 1

Page 3 of 18

1. Assign departmental business continuity responsibilities.
Departmental Business Continuity Coordinator {Include Business Continuity Coordinator responsibilities here.} The purpose for selecting a Business Continuity Coordinator is to designate a single person with appropriate backup to serve in a coordination capacity for the department. Responsibilities of the Business Continuity Coordinator can include liaison with emergency operations center, coordinate department efforts during plan development and recovery, and have delegated authority to execute recovery procedures. Name Business Continuity Coordinator 1st Alternate 2nd Alternate Telephone Number Alternate Number Other E-mail

Departmental Business Continuity Committee {Include Departmental Continuity Committee responsibilities here.} The purpose for assembling a Committee should be to ensure that various interests (faculty, staff, IT, research, and budget) within the department are represented within the continuity planning process with focus on ensuring that developed plans promote a successful recovery effort. Name Title or Areas represented

Page 4 of 18

2. Department mission and business functions/processes.
Departmental Mission Our department mission is the following

Department Critical Functions/Processes

We have identified and prioritized the following as critical functions or processes. Departmental Business Function/Process1 Maximum allowable outage2 Impact 3 Dependencies (internal and external)4 Will other business processes cease with out your business processes operating? If so, list.

Internal Vital records, IT, personnel with specialized skills, etc. External Vendors, IT, etc.
1

Critical Function/Process – Core services to the department’s mission or have been designated as an essential service for the University. Maximum Allowable Outage – The amount of time caused by disruption in operation before significant impact is incurred. Impact – Include a brief description of the impact of discontinued operations past the maximum allowable outage. Impact should take into consideration in both non-monetary and monetary outcomes. Impacts can be measured with respect to faculty, student and staff safety or

2

3

Page 5 of 18

morale, institutional reputation, compliance, loss of critical services, property loss, fines, cash flow, legal, etc. Impacts should also take into account timing of events.
4

Dependencies – Internal or external resources or inputs necessary for a departmental business function/process to operate

Other Departmental Functions/Processes

The department also has the following functions/processes. While important, the delay of these services would not cause significant impact with respect to the department in achieving its mission. Functions/Processes Allowable outage Impact

Page 6 of 18

3. Identification and evaluation of scenarios, risks, events and threats.
The following scenarios were evaluated for impact on critical functions/processes. Consideration was given to the sufficiency of existing mitigating activities/strategies. Additional activities/strategies were identified and reviewed based on cost/benefit and likely hood of event. Scenario, risk or threat (Likely events, both internal and external, that could disrupt operations of our department.) Fire leading to a loss of building and contents Description (Specific details of event.) Impact on Mission Critical Functions/Processes (Impact on resources necessary for a process to function.) Examples include:  Information technology o Data loss o Servers not recoverable  20% reduction in service (due to multiple service locations)  Halt of all operations (all services provided within same area) Mitigating Activities/Strategies (Impact on resources necessary for a process to function.)  Additional Activities/ Strategies To Be Considered General Strategy Options for Recovery Does scenario warrant business continuity plan? (Yes/No)

Isolated building loss. Utilities and University supported network services are intact at other campus locations.

Back up tapes stores offsite





Other examples may include flooding, and storms that lead to the loss of utilities, loss of network, etc.

 

Back up generators Manual work around procedures



Vital records  Relocate IT stored services to electronically/off Department -site ___. Implement a  Exercise process to emergency perform a backup rental restoration agreement for server and workstation recovery to restore departmental operating capacity to 20%. Maintain documentation of backup generator testing centrally

Page 7 of 18

Developing the Plan Section 2

Page 8 of 18

Business Continuity Plan
Business Unit

Scope and Objective
Describe the scope of the plan. Describe the scenario and the functions to be included within the plan.

Business Continuity Coordinator: BCC Contact information:

Telephone – Cell Phone – e-mail –

Date plan updated: Plan Updated by: Filename:

Page 9 of 18

Recovery Summary
4. Document recovery plans to recover critical functions for each scenario.
General Recovery Strategy This is a high level statement of the solutions determined to recover a department’s business function to a predetermined operating capacity. Relocate to identified alternate facility and restore operations to 20% capacity within 2 days.

Recovery Tasks

The following tasks will need to be performed to accomplish our strategy: Provide a simple list of tasks such as:  Notification  Contact backup site  Contact printer for emergency supply of preprinted forms  Arrange for delivery of laptops Recovery Tasks Notification Day 1 X Days Days 2-3 4-7 Day 8

Criticality 1

Responsible Person Business Continuity Coordinator

Detail for each Recovery task is included in a Detailed Process Task located at _______. Assumptions List assumptions made regarding scenario and the related planning. Examples include:  Workspace and required resources are available.  All team members or personnel with equivalent skills are available.  Backup of critical computer systems Assumption 1 Assumption 2 Assumption 3

Page 10 of 18

Detailed Process Task
5. Determine details to complete tasks.
For each task listed within the Recovery Summary, list the details and applicable information necessary to carry out that task. Each task should be provided on a separate page. Task Name The name should be the same name listed within the Recovery Summary. Team Lead Insert name of team lead. Task Summary

Provide a brief description of major steps involved within the task and the desired results when the task is completed.
Skills Required Skill Set Provide general knowledge requirements for completion of the task in the event backup personnel are required. Description Include detailed knowledge and access requirements.

Dependencies Internal Dependencies

External Dependencies

Recovery Tasks

The following steps will need to be performed to accomplish our task: Recovery Day Days Days Day Steps 1 2-3 4-7 8

Team Member Responsible

Resource Matrix (Optional) Include summary of resources that may be needed depending on the level of recovery. Workload People Workspace Computer(s) Printer(s) Phone(s) Other 20% 40% 60% 80% 100%

Page 11 of 18

Contact Information
6. List contact information.
Employees
Team Leaders
Contacted Y/N Name Recovery Role Cellular Pager e-mail Home Phone Office Phone Address Skills Notes

XXXXXXX calls Alternate Team Leaders
Contacted Y/N Name Recovery Role Cellular Pager e-mail Home Phone Office Phone Address Skills Notes

XXXXXXX calls Team Members
Contacted Y/N Name Recovery Role Cellular Pager e-mail Home Phone Office Phone Address Skills Notes

XXXXXXX calls Staff
Contacted Y/N Name Recovery Role Cellular Pager e-mail Home Phone Office Phone Address Skills Notes

University Services
Representative/ Contact Alternate Phone’s Comments (account number, etc)

Service

Address

Phone

e-mail

Vendors
Vendor Name Representative/ Contact Alternate Phone’s Comments (account number, etc)

Address

Phone

e-mail

Page 12 of 18

Customers
Vendor Name Representative/ Contact Address Phone Alternate Phone’s e-mail Comments (account number, etc)

Page 13 of 18

Resource Appendices
7. List necessary resources and reference materials.
Facility Requirements Infrastructure requirements Phone lines Network connections Seat/workstations Fax Electrical requirements Number-descriptions

Provide square footage required for each seat or workstation Number of outlets, special voltage requirements

Alternate locations Address/ Building Name

Phone Number

Alternate Phone Number

Contact Person

Equipment Requirements List workstations, phones, phones, copiers, and requirements for set up. Qty Description Comment (vendor name, purpose, etc.)

Day needed

2 2

Printer USB/Printer cords

Software/System Application Requirements Qty Description

Version

Comment

Day needed

Page 14 of 18

SuppliesQty

Description

Comment

Day needed

Forms Form Description #

Revision Date

Minimum Needed Comment

Current Inventory

Storage location

Contact information

Printer information

Day needed

Offsite Storage Materials Qty Description (box number, location, etc)

Comment

Day needed

Vital Records
Description Storage Site Media (disc, fiche, etc) Record Type (original, duplicate) Storage Frequency (D, W, M, Q, S, Y) Comment

Procedures Insert or attach existing procedures for daily procedures and procedures or checklist for process that will be unique to the recovery process.

Page 15 of 18

Maintaining the Plan Section 3

Page 16 of 18

8. Train personnel on the plan.
Include information about how the components of this plan will be communicated to the staff (meetings, access to electronic copy on department network, etc.). Include timeframes needed to train staff.

9. Test (validate) the plan.
Departmental Business Continuity Test Log Date Type of exercise Portion of plan tested Comments

Page 17 of 18

10. Maintain the plan.
Annual Certification
The (Department Name) business continuity plan has been reviewed and tested. The procedures provided in this plan meet the department’s expectations for business continuity under the assumptions which have outlined in this plan.

___________________________ Department Head

________________________ Date

___________________________ Business Continuity Coordinator

________________________ Date

Page 18 of 18


								
To top