BCP and DRP aim to preserve business operations during outages by having contingency plans. BCP addresses recovery of business processes, while DRP focuses on emergency response and returning critical applications to a functioning state. Together they provide guidelines for responding to various disruptive events through domains like cybersecurity, facility recovery, and personnel safety. The life cycle involves preparation, activation of alternative sites during disasters, then returning to normal operations once primary sites are restored.

1. BCP & DRP
Presented by
Mohammad Ashfaqur Rahman
Compliance Professional
www.linkedin.com/in/ashfaqsaphal
ashfaq.saphal@gmail.com

2. Objectives
 Idea of business continuty planning – BCP
 Relationship between BCP and DRP
 BCP implementation as per need
 Execution of DRP and BCP

3. Busines Continuty Planning
 Business continuity planning (BCP) addresses
– the preservation and
– recovery of business
– in the event of outages to normal business
operations.
 BCP counteracts
– interruptions to business activities and
– should be available to protect critical business
processes from the effects of major failures or
disasters.

4. Disaster Recovery Plans
 Contains procedures for
– emergency response
– extended backup operation
– and post-disaster recovery
 The primary objective of the disaster recovery plan is
to provide
– the capability to process mission-essential
applications, in a degraded mode,
– and return to normal mode of operation within a
reasonable amount of time.

5. BCP Domains
 Cyber incident response plan
 Disaster recovery planning
 Recovery of a damaged facility or components
 Occupant emergency plan (OEP)

6. BCP Domains
 Occupant emergency plan (OEP)
– provides the response procedures for occupants of a
facility in the event of a situation
– posing a potential threat to the health and safety of
personnel, the environment, or property.

7. BCP in Action
 Equipment failure (such as disk crash).
 Disruption of power supply or telecommunication.
 Application failure or corrupton of database.
 Human error, sabotage or strike.
 Malicious Software (Viruses, Worms, Trojan horses)
attack.
 Hacking or other Internet attacks.
 Social unrest or terrorist attacks
 Naturala Disester
 Evernenal deradation (Heat, Fire, water etc)

8. BCP Life Cycle

9. Diseter Rocovery Practices

10. Data Recovery
 Hot Site
 Warm Site
 Cold Site
 Mirror Site or Multiple Processing Centers
 Mobile Site

11. DR Sites
 Full volume backup
 Differential backup
 Incremental backup

12. Site Switch Over
 Understand the severity of “disaster”
 Coordinate the BCP (/ crisis) team
 Execute the BCP according to the “disaster”
 Communicate the crisis
 Secure the primary site

13. Return to Home
 Reactivate physical perimeter security systems (fire, IDS,
water, etc.)
 Implement and test the IT infrastructure. (i.e. networks,
DNS, e-mail, etc.)
 Certify the system is ready for operations.

14. It's Your Turn