High Level Rating

Program Phases

Assess ment Rating

Risk Rating

Program Initiation

5Average

Medium

Program • commitment

Program Planning

3 - Weak

Low

Functional Requirement

5Average

Interim BC Plan; BC Program Manageme nt Document Risk Manageme nt; Personnel; Salvage Restoration.

(Low, Medium, High)

High

Risk Concern Area

Concern

• •

• • •

Design and Development

4.2 Average

Low

IT Systems Recovery Strategy; Offsite Data Storage; Work around Procedures

•

•

•

Implementation

4.5 Average

High

Critical Record

•

BC coordinator is assigned part-time to BC responsibilities. This can compromise the effectiveness and success of BC program. Program is currently relying on an interim plan. Project plan is well structured but a complete program document is missing There are major weaknesses in the risk approach and the identification of threats. BC program is weak in the evaluation of detail personnel requirements There are no salvage and restoration requirements documented Overall design is aligned with the requirements but there are still some gaps and room for improvents RPO requirements are unknown for Billing Systems; Data integrity testing procedures are not documented; Lack a strategy for remote backup during recovery period Most critical business areas have work arounds documented but with inconsistent format and partial information There are no internal record storage facility and program;

Testing Maintenance

Execution

5.2 Average 3.9 Average

High Medium

Storage; BC • BC Plan document is Plan unstructured and missing key Document elements. BC Plan Missing testing of key business testing area recovery capability. Recovery site change monitoring; Risk Controls;

Lacks proactive change management at recovery site; Lacks periodic risk assessments;