Let’s understand the concepts of business continuity and Disaster Recovery in brief. To know more, visit: www.eccouncil.org/business-continuity-and-disaster-recovery

1. Copyright EC-Council 2020. All Rights Reserved.​
Business Continuity & Disaster Recovery

2. Business Continuity & Disaster Recovery
The process of business continuity and disaster recovery enables
organizations to remain operational in the aftermath of cyber disaster
by minimizing the effects of outages and disruptions on business
operations.
Business continuity and disaster recovery is a process that involves
conducting a business impact analysis, risk analysis, developing
Business Continuity / Disaster Recovery plans, tests, exercises and
training.

3. 10 Steps to Business Continuity &
Disaster Recovery Planning
Identify Key Assets
& Operation
Risk Assessment
Business Impact
Analysis
Determine the
Downtime &
Recovery Time
Define Recovery
Strategies
Create a Plan
Establish
Communication &
Assign
Responsibilities
Disaster Recovery
Planning
Define Access to
Data & Applications
Business Continuity
Plan Testing,
Maintenance &
Training

4. List the Assets Identify the Risks
Assess Potential
Consequences
Prioritize
the Risks
Document the
Results
Natural Disasters System Failure Accidental Error
Malicious
Activities
Performing Risk Assessment

5. Defining the Scope
Identify Activities
Involved
Assess Financial &
Operational Impacts
Identify Critical
Process
Assess MTPD
(Maximum tolerable
period of disruption)
Assign Priority to
Activities Critical to
Business
Resources Required
for Each Critical
Activity to Resume
Services
Estimate RTOs for
Critical Activities
Consider
Dependencies to
Critical Activities
Define RPO (Recovery
Point Objective) for
Critical Activities
Business
Impact
Analysis

6. Business Impact Analysis Incident Handling/Response Disaster Recovery Business Continuity
• Identify Threats &
Attacks
• Business Unit Analysis
• Scenario of Successful
Attacks
• Evaluating Potential
Damage
• Classification of Plans
Based on Criticality
• Incident Planning
• Incident Detection
• Incident Response
• Incident Recovery
• Disaster Recovery
Planning
• Crisis Management
• Recovery Operations
• Business Continuity
Planning
• Continuity of Operations
• Continuity Management
• Business Continuity Plan
Testing, Maintenance,
and Training
Key Components of a Business Continuity Plan

7. Types of Disaster Recovery Plans
Virtualization-Based Disaster Recovery
Network Disaster Recovery
Cloud-Based Disaster Recovery
Data Center Disaster Recovery

8. Steps To Data Back-up Strategies
Identify What Data You Want To Back-up
How Often Data Back-up Is Required
Implement A Back-up And Recovery Solution
Test And Monitor The Back-up System

9. Who Should Be
Involved?
Objective of
Testing
Frequency of
Testing
Testing
Scenarios
All Employees
Emergency Response
Team
Business Continuity
Team
Crisis Communication
Contacts
Data Loss/Breach
Data Recovery
Power Outage
Network Outage
Physical disruption
Emergency
Identify Gaps &
Weakness in BCDR Plan
Ensure Business
Continuity objectives
are met
Review response to
various disruptive
events
Improve process,
systems and update
BCP
Business Continuity
and Disaster Recovery
plan review and
testing should be
conducted at least
quarterly
Testing a Business Continuity Plan

10. To Learn More, Visit
www.eccouncil.org/business-continuity-and-disaster-recovery