13 Steps for Business Continuity Planning
Step 1: Review available resources from Ready.gov and FEMA
Step 2: Use available industry research to understand plan requirements, i.e. Sarbanes-Oxley, HIPPA
Step 3: Develop a Business Continuity Policy Statement that gives an overview of what the expectations are in an emergency, i.e. major storm affecting power, means of communication, incident reporting.
Step 4: Create company level and departmental/unit level mini-plans to manage local risk and to address risks that impact other units
Step 5: Cross train employees to reduce single point of failure
Step 6: Create teams to develop the plan with representation from all units, senior management and security personnel.
Step 7: Do routine scenario based employee readiness and technology readiness exercises
Step 8: Provide emergency updates and meetings over the Internet, using online voice and video services
Step 9: Enable secure access to real-time and non-real-time
Step 10: Conduct emergency meetings online using Windows Live Meeting or Skype
Step 11: Audit your network.
Do you have what you need to operate?
Do all employees needing remote access to perform critical functions have the access and ability to use it?
What changes need to be made?
Step 12: Test your Business Continuity Plan utilizing 3rd party testing.
Step 13: Continuously monitor events for proactive risk and continuity management.