Process Factsheet: IT Service Continuity Management
Process Factsheet: IT Service Continuity Management
GOAL:
The goal for ITSCM is to support the overall Business Continuity Management
process by ensuring that the required IT technical and services facilities
(including computer systems, networks, applications, telecommunications,
technical support and Service Desk) can be recovered within required, and
agreed, business timescales.
ACTIVITIES:
Stage 1: Initiation
Link with Business Continuity Plan
Policy Setting
Terms of reference and scope
Allocate Resources
Stage 3: Implementation
Write Continuity plans, including:
o Emergency Response Plan
o Damage Assessment Plan
o Salvage Plan
o Crisis Management and PR Plan
Implement stand-by arrangements
Implement Recovery options
Test the Plans
Develop and implement procedures and working instructions
Link ITSCM to Change Management to keep plans and recovery options up to date
IT Staff need to be aware and trained to use the plans
Continuous improvement of the process through review and testing
Risk Analysis Technique
Risk Analysis and Management Method (CRAMM) method – a phased approach.
Identify components
Analyse the threats
Assess the vulnerabilities
Evaluate threats and vulnerabilities to provide an estimate of the risks.
The scope of the process should be considered when estimating the risks; in fact
RESULTS:
Restoration of the services in a controlled manner
Continuity of the business
Reduced risk to the business
Insight into threats & vulnerabilities
COST:
Production of the evacuation plan
Risk analysis and execution of continuity planning
Take measures regarding risk management
Provide options for replacement
Maintain the plan
Testing and reviewing the plan
Educate staff
BENEFITS:
Potential lower insurance premiums: The IT organisation can help the
organisation demonstrate to underwriters or insurers that they are proactively
managing down their business risks.