Chapter 7 - Domain 6: Business continuity and disaster recovery planning

Abstract

This chapter examines the Business Continuity Planning and Disaster Recovery Planning (BCP/DRP) that has emerged as a critical domain in the Common Body of Knowledge. It is an organization's last line of defense: when all other controls have failed, BCP/DRP is the final control that may prevent drastic events such as injury, loss of life, or failure of an organization. As information security professionals, it must be vigilant, and protects the organizations and staff from the disruptive events. An additional benefit of BCP/DRP is that an organization that forms a business continuity team, and conducts a thorough BCP/DRP process, is forced to view the organization's critical processes and assets in a different, often clarifying, light. Critical assets must be identified and key business processes understood. Standards are also employed. Risk analysis conducted during a BCP/DRP plan can lead to immediate mitigating steps. Future potentially damaging disaster may have no impact due to prudent risk management steps taken as a result of a thorough BCP/DRP plan.