This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Related on MHA Consulting: The Cloud Is Not a Magic Kingdom: Misconceptions About Cloud-Based IT/DR The Cloud Is Not a Plan A common misconception today is that the shift from company-owned data centers toward cloud-based environments means companies can quit worrying about IT disasterrecovery (IT/DR). (IT/DR
This post is part of BCM Basics, a series of occasional, entry-level blogs on some of the key concepts in business continuity management. For business continuity newcomers, few topics are as confusing as the difference between business continuity and IT disasterrecovery. Let’s go over them.
Solutions Review’s listing of the best backup and disasterrecovery companies is an annual sneak peek of the solution providers included in our Buyer’s Guide and Solutions Directory. These changes speak to the cloud’s continued rise, significantly impacting the backup and disasterrecovery market over recent years.
Today we’re going to look at five commonly held myths about IT/disasterrecovery. These … The post Hit or Myth: 5 Common Misconceptions About IT/disasterrecovery appeared first on MHA Consulting. One definition of a myth is something you know for sure that happens to be untrue.
Last time, we looked at how to write recovery plans to protect your organization’s computer systems and applications. In today’s post we’re going to lay out how to write plans … The post Taking Care of Business: How to Write a BusinessRecovery Plan appeared first on MHA Consulting.
Business continuity (BC) and disasterrecovery (DR) are often used together and interchangeably. Continued smooth operation is a fairy tale in the business world. Put simply, BC is an organization’s hedge against disaster. Once can argue that both business continuity plans (BCP) and DR are reactive.
In that event, businesses require a disasterrecovery plan with best practices to restore hardware, applications, and data in time to meet the businessrecovery needs. What is a DisasterRecovery Plan? Notable Best Practices for DisasterRecovery. Why Do I Need One?
IT DisasterRecovery Planning – “No worries, we have a backup?!” Last Updated on May 31, 2020 by Alex Jankovic Reading Time: 3 minutes When asked about their organization’s IT DisasterRecovery (ITDR) plans, some will smile and say, “Yes, we have a backup and it is fully outsourced.”
IT DisasterRecovery Planning – “No worries, we have a backup?!”. When asked about their organization’s IT DisasterRecovery (ITDR) plans, some will smile and say, “Yes, we have a backup and it is fully outsourced.” ITDR Planning depends on Business Impact Analysis (BIA) and Risk Assessments. IT DisasterRecovery.
There are two main aspects to writing a businessrecovery plan: The science of knowing what to include and the art of writing the content. Today’s blog takes a look … The post The Science and Art of Writing a Recovery Plan appeared first on MHA Consulting.
The Best Business Continuity Software Archer Platform: Archer Business Resiliency Description: Archer Business Resiliency enables users to identify and catalog their organization’s mission-critical processes and systems, as well as develop detailed business continuity and disasterrecovery plans to protect their business from disruption.
Related on MHA Consulting: The Write Stuff: How to Create and Maintain Business Continuity Documentation Five Ways BC Documentation Can Go Wrong An organization can reap myriad benefits by documenting its business continuity or IT disasterrecovery (IT/DR) program in the form of written recovery plans.
Do they understand the key components of crisis management (team, plan, mock disasters, emergency notification system, etc.) Business and DisasterRecovery. Do they understand the key components of businessrecovery (plan development, recovery strategies, testing, maintenance, etc.)
Does IT understand that their mission is to deliver critical business strategies, business models and business services? Is this because IT already completed some of the Business Continuity Planning activities by developing an IT DisasterRecovery Plan , and this is just repetitive?
Does IT understand that their mission is to deliver critical business strategies, business models and business services? Is this because IT already completed some of the Business Continuity Planning activities by developing an IT DisasterRecovery Plan , and this is just repetitive?
Related on MHA Consulting: Critical Assistance: How a Consultant Can Strengthen Your Crisis Management Program According to Strong Language: The MHA Glossary of Essential Business Continuity Terminology , crisis management is “the process of trying to resolve a serious adverse event with minimal impact on an organization and its stakeholders.”
NOTE: DRII takes this definition from the Business Continuity Institute BCI and DisasterRecovery Journal DRJ. These sections can be created logically such as Operations, Finance, or broken into businessrecovery areas. Business Continuity Plan Governance. Some Additional Information on Business Continuity.
Activating the DisasterRecovery Teams, assigning people to either Business Continuity or BusinessRecovery efforts. Assigning staff to maintain a 24-hour schedule for containment and recovery. Personally ensuring that adequate personnel safeguards are in place.
The virtualization of IT has greatly changed this aspect of BC and IT/disasterrecovery; however, the need to ensure that critical services have the appropriate protections is as great as ever. In the old days many mid-sized and large organizations had their own data centers and physical servers. The subordination of BC to IT.
Ideally, this group will be aware of the need to integrate cyber security and businessrecovery. From the BC point of view, recovery plans and actions that envision turning to such services need to be consistent with security requirements. Cyber steering committee. Third-party controls and assessment.
A properly executed BIA will reduce overall operational and financial impacts, reduce potential losses and enhance the business operations of your organization. The BIA engagement will produce a set of findings that will be used to develop recovery strategies, Business Continuity Plans and IT DisasterRecovery Plans.
The following is a list of ways to build awareness: Success stories in company newsletters Success videos on company TVs Posters reminding key points Discussions with departments Dedicated quarterly newsletter with FAQ or Q&A Company wiki or online forum Business Continuity and DisasterRecovery Planning can generate a lot of employee interest.
If the number is equal to or higher than the risk factor-tolerance number, you are well within tolerance range and your businessrecovery plan is on the mark. If it is lower, then your plan is insufficient and you should take further action to strengthen your businessrecovery plan.
Businessrecovery strategies Your BCP must include strategies and techniques to recover and restore critical business functions and processes affected by the disruption. This means having backup and recovery plans, alternative work locations, and methods for restoring data and systems.
The questionnaire should include questions about the vendor’s data security practices, businessrecovery plans, and disasterrecovery plans. Due diligence is usually done through vendor questionnaires that assess and compare a vendor’s security setup to industry standards.
If a disaster strikes one of your organization’s critical sites, you might need to temporarily shift its operations to a home away from home. To be ready for this eventuality, … The post A Home Away From Home: Crafting a Site Recovery Plan appeared first on MHA Consulting.
Many organizations lack a clear, recognized understanding of when the metaphorical switch will be flipped to start the recovery time objective (RTO) countdown timer. There are two options, either of … The post About Time: Deciding When to Start Your RTO Countdown appeared first on MHA Consulting.
The Department of Transportation recently announced a proposed $1 million fine of Colonial Pipeline for shortcomings in its recovery planning that increased the societal damage in the wake of the cyberattack on the company last year.
In everyday life, stress is usually regarded in a negative light, but in business continuity management, stress testing your recovery plans can play a very positive role in improving an … The post The Benefits of Stressing Out: Why You Should Stress Test Your Recovery Plans appeared first on MHA Consulting.
If a disaster strikes one of your organization’s critical sites, you might need to temporarily shift its operations to a home away from home. To be ready for this eventuality, your organization should have a site recovery plan. Why Your Company Needs a Site Recovery Plan Floods, fires, and storms are only a few […].
There are numerous risks a company can face that will require an Emergency Response Plan. Rather than creating a separate plan for every type of event that could occur, it is advisable to create a basic emergency response checklist that can be used regardless of the emergency. A response plan can cover a variety of emergencies.
Accept the Risk : for rarely occurring, low-impact risks that are unlikely to jeopardize the business, it may be reasonable to accept the risk. Depending on a risk’s impact and probability of occurring, different risk control measures can be taken.
As a leading continuity-consulting firm to major private and public entities over the last thirteen (13) years, we have worked across many industries and seen varying levels of organizational preparedness in the event of an unplanned disruption due to natural, man-made or technological events.
On a recent post, we discussed the basics of the Incident Command System (ICS). This week we are building off of these ideas and seeing how a typical ICS structure may look for a corporation. ICS enables integrated communication and planning by establishing a manageable span of control.
Organized Chaos isn’t a new term. But I have always advised our clients that what you want in your organization during a crisis is “organized chaos. Consider the following scenario: There is a blazing fire in a building. There is heavy smoke and flames everywhere; you can hardly see your hand in front of you.
Managing an enterprise BCM program requires BCM Practitioners to address many program initiatives and tasks that must must seamlessly work together. I liken BCM programs to a watch with many moving parts; some critical and others not so critical to its operation and ability to provide accurate time. audit requests, questionnaires, etc.)
As BCM Practitioners we are often required to dream up, plan, implement and facilitate a mock disaster exercise for our Crisis Management teams. Steps in planning a successful mock disaster exercise are: Consider the past list of scenarios you have presented to the team in the past.
A recent Harvard Business Review article in the December 2013 edition entitled “The Hidden Benefits of Keeping Teams Intact” discussed the benefits and reasons for keeping teams familiar with each other. So how does this apply to us?
Plans to test should include business processes, IT systems, work area recovery, pandemic, and more. Some tests only involve two people while others can include an entire department. All tests require preparation time. This is necessary to coordinate schedules of people, exercise control rooms, and equipment.
A disaster scenario is a hypothetical incident that gives participants a problem to work through. The scenario may describe any disruption to the normal flow of business. When selecting a scenario, be sure to make it one that is realistic as well as broad enough to include several teams to test intergroup communications.
If an organization is providing its own recovery site, it is going to require regular maintenance in order to match requirements of the site it’s supporting. As the original facility is likely to change and evolve over time, so must the recovery center.
All plans should be written in the same way you would explain it to someone standing in front of you. You should always start with an overview and the basic necessities and then get into details.
There are numerous risks a company can face that will require an Emergency Response Plan. Rather than creating a separate plan for every type of event that could occur, it is advisable to create a basic emergency response checklist that can be used regardless of the emergency. A response plan can cover a variety of emergencies.
Accept the Risk : for rarely occurring, low-impact risks that are unlikely to jeopardize the business, it may be reasonable to accept the risk. Depending on a risk’s impact and probability of occurring, different risk control measures can be taken.
We organize all of the trending information in your field so you don't have to. Join 25,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content