{"id":14180,"date":"2015-12-02T17:55:01","date_gmt":"2015-12-02T17:55:01","guid":{"rendered":"https:\/\/www.whizlabs.com\/?p=14180"},"modified":"2024-05-10T16:17:12","modified_gmt":"2024-05-10T10:47:12","slug":"business-continuity-plansbcp-and-chennai-floods","status":"publish","type":"post","link":"https:\/\/www.whizlabs.com\/blog\/business-continuity-plansbcp-and-chennai-floods\/","title":{"rendered":"Business Continuity plans(BCP) and Chennai floods"},"content":{"rendered":"

In wake of the incessant rains in south India and the resultant flooding organizations had to put their \u2018business continuity plans\u2019 (BCP) into action. No sooner did the rains lash the relatively dry area did the city know of a new natural disaster that was getting unleashed. Coping with this new type of natural disaster required a BCP (business continuity plans) for most organizations in Chennai.<\/p>\n

What is BCP?\"Business<\/h4>\n

\u2018Business continuity\u2019 may be an InfoSec professional\u2019s domain of expertise but it was the need of the hour in Chennai.\u00a0\u2018Business continuity\u2019 is planning to continue businesses at another location after disaster strikes till repair of the original location is under way. It also involves dealing with partners, shareholders, customers and other important stakeholders without whom an organization will not be complete.<\/p>\n

We will talk about the business continuity plan as outlined in the NIST publication. The NIST publications define security measures that can be adopted by organizations, business institutions and educational institutions. These publications help an organization develop a good security posture. The NIST 800-34 publication is the \u2018Contingency planning guide for Federal Information systems\u2019.<\/p>\n

What are the steps in a BCP?<\/h4>\n

These are some of the steps as specified in the NIST 800-34 publication:<\/p>\n

1. Develop the contingency planning policy A \u2018policy\u2019 starts an effective continuity plan. This policy serves as the guide for the BCP and assigns roles to perform the tasks.<\/p>\n

2. Conduct the business impact analysis (BIA) BIA helps an organization to first identify key functions in an organization and prioritize them. Vulnerabilities, threats and risks are also calculated during this process.<\/p>\n

3. Identify preventive controls Preventive controls are implemented to mitigate the risks identified by the BIA.<\/p>\n

4. Create contingency strategies Effective recovery strategies have to be developed such that all systems can be brought back up after a disaster.<\/p>\n

5. Develop an information system contingency plan This plan should involve steps to get the systems back to their original state.<\/p>\n

6. Ensure plan testing, training, and exercises All BCP should be tested to be sure that they meet the desired goals and any gaps should be identified and resolved. Training and exercises should be imparted to all the employees to make sure that they behave in the appropriate manner.<\/p>\n

7. Ensure plan maintenance. Every plan is successful only if it is maintained properly and updated on a regular basis. This should be documented reflecting the changes in the organization and other enhancements. (Contingency Planning Guide for Federal Information Systems, 2010)<\/p>\n

How did firms in Chennai invoke their BCP?<\/h4>\n