|
Second, the enterprise is guided through a Risk Analysis.
This is done in three parts:
-
Risk Assessment,
deciding what risks the business is vulnerable to;
-
Business Impact
Analysis, quantifying and rating the risks;
-
Determining
Recovery Stategies for those risks rated high in the Business Impact
Analysis.
Next is the actual writing and testing of the
plan.
-
There may be
several drafts of the plan written, with several different parts of
each.
-
After testing in
Tabletop Exercises, drills, Functional Exercises, and, if possible, Full Scale
Exercises ,
-
The plan can be
changed and
Finally, the BCP is adopted by the Directors or
Principals, and integrated into the Business Plan and budget for continuous
training, exercising and review. |
