Description

This seminar offers you the steps and best practices for carrying out an IT backup and business continuity project in accordance with standards (ISO 7001/27002, BS25999, ITIL V3, etc.). From risk analysis and plan design to testing and the crisis unit.

Who is this training for ?

Continuity Managers, Risk Managers or CISO. IT directors or managers, security correspondents, MOA and MOE project managers, internal or external auditors, consultants.

Training objectives

Training program

• Why manage continuity
  • The evolution of companies and their strategy.
  • The strategic importance of information.
  • The challenges for the company of a strategy of continuity: laws and regulations, norms and standards.
• Definitions and concepts
  • Define the continuity strategy.
  • The differences between business continuity plan (BCP), IT backup plan (DRP), recovery plan.
  • Safety reminders: DICP criteria and the 11 ISO themes.
  • The continuity roadmap.
• The project and its management
  • Reminders on project management.
  • The phases of a continuity plan project.
  • The particularities of the continuity plan project.
• Risk analysis
  • The components of risk.
  • The principles of the different methods.
  • The other standards (COBIT, ISO.
  • ).
  • The notion of an uncertainty matrix.
  • Risk analysis for the continuity plan.
• Identifying critical activities
  • Determine the critical activities (BIA) of a company.
  • The fundamental parameters of impact analysis.
  • The notion of Service Delivery Objectives.
• Means for designing devices
  • The elements and the budget to develop the scenarios.
  • The different fallback sites (hot, warm, cold sites, reciprocal agreement.
  • ) internally or outsourced.
  • Decision criteria.
• Continuity plans
  • The construction of procedures.
  • Rescue teams: constitution, roles.
  • An example of an outline of an emergency plan.
• Escalation procedures and crisis unit
  • The management of escalation in phase with the RTO.
  • The constitution of the crisis unit.
  • The principles of triggering the emergency plan.
  • Business continuity as an ITIL process.
  • The importance of maintaining the plan in operational condition on a daily basis: the PDCA life cycle.
  • The continuity process and other processes.