Program Phases
Assess ment Rating
Risk Rating
Program Initiation
5Average
Medium
Program • commitment
Program Planning
3 - Weak
Low
Functional Requirement
5Average
Interim BC Plan; BC Program Manageme nt Document Risk Manageme nt; Personnel; Salvage Restoration.
(Low, Medium, High)
High
Risk Concern Area
Concern
• •
• • •
Design and Development
4.2 Average
Low
IT Systems Recovery Strategy; Offsite Data Storage; Work around Procedures
•
•
•
Implementation
4.5 Average
High
Critical Record
•
BC coordinator is assigned part-time to BC responsibilities. This can compromise the effectiveness and success of BC program. Program is currently relying on an interim plan. Project plan is well structured but a complete program document is missing There are major weaknesses in the risk approach and the identification of threats. BC program is weak in the evaluation of detail personnel requirements There are no salvage and restoration requirements documented Overall design is aligned with the requirements but there are still some gaps and room for improvents RPO requirements are unknown for Billing Systems; Data integrity testing procedures are not documented; Lack a strategy for remote backup during recovery period Most critical business areas have work arounds documented but with inconsistent format and partial information There are no internal record storage facility and program;
Testing Maintenance
Execution
5.2 Average 3.9 Average
High Medium
Storage; BC • BC Plan document is Plan unstructured and missing key Document elements. BC Plan Missing testing of key business testing area recovery capability. Recovery site change monitoring; Risk Controls;
Lacks proactive change management at recovery site; Lacks periodic risk assessments;