《Business Continuity Template：业务连续性的模板.docx》由会员分享，可在线阅读，更多相关《Business Continuity Template：业务连续性的模板.docx（56页珍藏版）》请在三一文库上搜索。
1、Organization LogoBusiness Continuity Plan TemplateVersion 1.0Month Day, Year Table of ContentsDOCUMENT CHANGE CONTROL6SECTION I: INTRODUCTION7A.How to Use This Plan7B.Objectives7C.Scope8D.Assumptions8E.Changes to the Plan/Maintenance Responsibilities9F.Plan Testing Procedures and Responsibilities10G
2、.Plan Training Procedures and Responsibilities10H.Plan Distribution List11SECTION II: BUSINESS CONTINUITY STRATEGY12A.Introduction12B.Business Function Recovery Priorities12C.Relocation Strategy and Alternate Business Site12D.Recovery Plan Phases131.Disaster Occurrence132.Plan Activation133.Alternat
3、e Site Operations134.Transition to Primary Site13E.Vital Records Backup13F.Restoration of Hardcopy Files, Forms, and Supplies14G.On-line Access to Computer Systems14H.Mail and Report Distribution15SECTION III: RECOVERY TEAMS16A.Purpose and Objective16B.Recovery Team Descriptions16C.Recovery Team Ass
4、ignments16D.Personnel Notification17E.Team Contacts17F.Team Responsibilities17Business Continuity Coordinator 19EOC Communications Team 19EOC Human Resources Team 20EOC Administration Team 20Emergency Response Team 21Information Technology Recovery Team (See also Disaster Recovery Plan) 21SECTION IV
5、: RECOVERY PROCEDURES23A.Purpose and Objective23B.Recovery Activities and Tasks24PHASE I: Disaster Occurrence24PHASE II: Plan Activation28PHASE III: Alternate Site Operations33PHASE IV: Transition to Primary Operations35SECTION V: APPENDICES38Appendix A - Employee Telephone Lists39Appendix B - Recov
6、ery Priorities for Critical Business Functions40Appendix C - Alternate Site Recovery Resource Requirements41Appendix D - Emergency Operations Center (EOC) Locations43Appendix E - Vital Records44Appendix F - Forms and Supplies45Appendix G - Vendor Lists46Appendix H - Desktop Computer Configurations47
7、Appendix I - Computer System Reports48Appendix J - Critical Software Resources49Appendix K - Alternate Site Transportation Information50Appendix L - Alternate Site Accommodations Information51Appendix M - Severity Impact Assessments52Appendix N - Business Impact Assessment53Appendix O - Recovery Tas
8、ks List54Appendix P - Recommended Office Recovery55CONFIDENTIAL Document for Internal Use by (Organization) Personnel OnlyVersion Number: 1.00Last Updated: Month Day, Year Printed: Month, YearPage 5 of 56 Department Business Continuity PlanIntroductionDOCUMENT CHANGE CONTROLDateVersionRequesterTech.
9、 WriterChange/ReviewModified by: _ _/_/_Reviewed by: _ _/_/_Approved by: _ _/_/_ CONFIDENTIAL Document for Internal Use by (Organization) Personnel OnlyVersion Number: 1.00Last Updated: Month Day, Year Printed: Month, YearPage 6 of 56 Department Business Continuity PlanIntroductionSection I: Introdu
10、ctionA. How to Use This PlanIn the event of a disaster which interferes with s ability to conduct business from one of its offices, this plan is to be used by the responsible individuals to coordinate the business recovery of their respective areas and/or departments. The plan is designed to contain
11、, or provide reference to, all of the information that might be needed at the time of a business recovery.This plan is not intended to cover the operations of s separately structured Emergency Response Team.Index of Acronyms: (EOC) Emergency Operations Center (EMT) Emergency Management Team (ERT) Em
12、ergency Response Team (BCP) Business Continuity Plan (IT) Information TechnologySection I, Introduction, contains general statements about the organization of the plan. It also establishes responsibilities for the testing (exercising), training, and maintenance activities that are necessary to guara
13、ntee the ongoing viability of the plan.Section II, Business Continuity Strategy, describes the strategy that the Department will control/implement to maintain business continuity in the event of a facility disruption. These decisions determine the content of the action plans, and if they change at a
14、ny time, the plans should be changed accordingly.Section III, Recovery Teams, lists the Recovery Team functions, those individuals who are assigned specific responsibilities, and procedures on how each of the team members is to be notified.Section IV, Team Procedures, determines what activities and
15、tasks are to be taken, in what order, and by whom in order to affect the recovery.Section V, Appendices, contains all of the other information needed to carry out the plan. Other sections refer the reader to one or more Appendices to locate the information needed to carry out the Team Procedures ste
16、ps.B. ObjectivesThe objective of the Business Continuity Plan is to coordinate recovery of critical business functions in managing and supporting the business recovery in the event of a facilities (office building) disruption or disaster. This can include short or long-term disasters or other disrup
17、tions, such as fires, floods, earthquakes, explosions, terrorism, tornadoes, extended power interruptions, hazardous chemical spills, and other natural or man-made disasters.A disaster is defined as any event that renders a business facility inoperable or unusable so that it interferes with the orga
18、nizations ability to deliver essential business services.The priorities in a disaster situation are to:1. Ensure the safety of employees and visitors in the office buildings. (Responsibility of the ERT)2. Mitigate threats or limit the damage that threats can cause. (Responsibility of the ERT)3. Have
19、 advanced preparations to ensure that critical business functions can continue.4. Have documented plans and procedures to ensure the quick, effective execution of recovery strategies for critical business functions.The Business Continuity Plan includes procedures for all phases of recovery as define
20、d in the Business Continuity Strategy section of this document.C. ScopeThe Business Continuity Plan is limited in scope to recovery and business continuance from a serious disruption in activities due to non-availability of s facilities. The Business Continuity Plan includes procedures for all phase
21、s of recovery as defined in the Business Continuity Strategy of this document. This plan is separate from s Disaster Recovery Plan, which focuses on the recovery of technology facilities and platforms, such as critical applications, databases, servers or other required technology infrastructure (see
22、 Assumption #1 below). Unless otherwise modified, this plan does not address temporary interruptions of duration less than the time frames determined to be critical to business operations.The scope of this plan is focused on localized disasters such as fires, floods, and other localized natural or m
23、an-made disasters. This plan is not intended to cover major regional or national disasters such as regional earthquakes, war, or nuclear holocaust. However, it can provide some guidance in the event of such a large scale disaster.D. AssumptionsThe viability of this Business Continuity Plan is based
24、on the following assumptions:1. That a viable and tested IT Disaster Recovery Plan exists and will be put into operation to restore data center service at a backup site within five to seven days.2. That the Organizations facilities management department has identified available space for relocation
25、of departments which can be occupied and used normally within two to five days of a facilities emergency.3. That this plan has been properly maintained and updated as required.4. That each department has their own Business Continuity Plan.5. The functions and roles referenced in this plan do not hav
26、e to previously exist within an organization; they can be assigned to one or more individuals as new responsibilities, or delegated to an external third party if funding for such services can be arranged and allocated.E. Changes to the Plan/Maintenance ResponsibilitiesMaintenance of the Business Con
27、tinuity Plan is the joint responsibility of the management, the Facilities Management Department, and the Business Continuity Coordinator. management is responsible for:1.Periodically reviewing the adequacy and appropriateness of its Business Continuity strategy.2.Assessing the impact on the Busines
28、s Continuity Plan of additions or changes to existing business functions, procedures, equipment, and facilities requirements.3.Keeping recovery team personnel assignments current, taking into account promotions, transfers, and terminations.4.Communicating all plan changes to the Business Continuity
29、Coordinator so that the organizations IT master Disaster Recovery Plan can be updated.Facilities Management Department management is responsible for:1.Maintaining and/or monitoring offsite office space sufficient for critical functions and to meet the facility recovery time frames.2.Communicating ch
30、anges in the “Organization IT Disaster Recovery Plan” plan that would affect groups/departments to those groups/departments in a timely manner so they can make any necessary changes in their plan.3.Communicating all plan changes to the Business Continuity Coordinator so that the master plan can be u
31、pdated.The Business Continuity Coordinator is responsible for:1.Keeping the organizations IT Recovery Plan updated with changes made to facilities plans.2.Coordinating changes among plans and communicating to management when other changes require them to update their plans.F. Plan Testing Procedures
32、 and Responsibilities management is responsible for ensuring the workability of their Business Continuity Plan. This should be periodically verified by active or passive testing.G. Plan Training Procedures and Responsibilities management is responsible for ensuring that the personnel who would carry
33、 out the Business Continuity Plan are sufficiently aware of the plans details. This may be accomplished in a number of ways including; practice exercises, participation in tests, and awareness programs conducted by the Business Continuity Coordinator.H. Plan Distribution ListThe Business Continuity
34、Plan will be distributed to the following departments and/or individuals, and will be numbered in the following manner:Plan ID NoLocationPerson ResponsibleCONFIDENTIAL Document for Internal Use by (Organization) Personnel OnlyVersion Number: 1.00Last Updated: Month Day, Year Printed: Month, YearPage
35、 55 of 56 Department Business Continuity PlanBusiness Continuity StrategySection II: Business Continuity StrategyA. IntroductionThis section of the Business Continuity Plan describes the strategy devised to maintain business continuity in the event of a facilities disruption. This strategy would be
36、invoked should the primary facility somehow be damaged or inaccessible. It is assumed that each critical business function at your location also has their own group/department Business Continuity Plan, which is similar to this plan except the recovery procedures and appendices have been customized f
37、or each respective group/department based on size, and complexity.B. Business Function Recovery PrioritiesThe strategy is to recover critical business functions at the alternate site location. This can be possible if an offsite strategy has been put into effect by Office Services and Disaster Recove
38、ry/IT Teams to provide the recovery service. Information Systems will recover IT functions based on the critical departmental business functions and defined strategies.Business Functions by Location are listed in Appendix B (Recovery Priorities for Critical Business Functions). “Time Critical Busine
39、ss Functions,” i.e., those of which are of the most critical for immediate recovery at the secondary location are: Reference: Appendix B Recovery Priorities for Critical Business FunctionsC. Relocation Strategy and Alternate Business SiteIn the event of a disaster or disruption to the office facilit
40、ies, the strategy is to recover operations by relocating to an alternate business site. The short-term strategies (for disruptions lasting two weeks or less), which have been selected, include:Primary LocationAlternate Business SiteTBDFor all locations, if a long-term disruption occurs (i.e. major b
41、uilding destruction, etc.); the above strategies will be used in the short-term (less than two weeks). The long-term strategies will be to acquire/lease and equip new office space in another building in the same metropolitan area.D. Recovery Plan PhasesThe activities necessary to recover from a faci
42、lities disaster or disruption will be divided into four phases. These phases will follow each other sequentially in time.1. Disaster OccurrenceThis phase begins with the occurrence of the disaster event and continues until a decision is made to activate the recovery plans. The major activities that
43、take place in this phase includes: emergency response measures, notification of management, damage assessment activities, and declaration of the disaster.2. Plan ActivationIn this phase, the Business Continuity Plans are put into effect. This phase continues until the alternate facility is occupied, critical business functions reestablished, and computer system service restored to s Departments. The major activities in this phase include: notification and assembly of