Business Continuity Outline

I. Purpose/Mission
- When will this plan be implemented, what does the plan contain
- What the plan will prevent from happening to people, business and how it will
help recovery operations
II. Assumptions
- List things that will help in a disaster situation (generator, company personnel,
government aid)
- Should also contain what YOU KNOW or the client has TOLD YOU.
- Things that should already be done (assumed to be done)
- Hardware Procurement
- Processes
- Procedures
- Finances/Approvals
- Design/Choices
- etc
III. Basis of Plan
- How was the plan was formed
- References to other guides, disaster plans
IV. Scope
- A. Levels of disaster preparedness that the plan covers for the premises
- B. Disclaimer that a variety of situations could cause this plan to be put in place
- C. List of variety of situations (all levels)
V. Concept of Operation
- A. Emergency response system (Text Message/Email Alert System)
- B. Specify level 2, then level 1 type incidents
- C. Specify level 3 type incidents
- D. Why this BCDR plan was created in relation to keeping students safe and
maintaining school resources as much as possible
VI. Execution
- A. Where will level 1 and 2 response come from? Where is data stored about
incident, who holds onto it (Department, Police Department, Emergency
Preparedness Manager, etc)
- B. BCDR Plan authority (ordered list of people allowed to put it into action)
- C. BCDR Plan Management Responsibilities (list tasks for each)
- 1. Emergency Preparedness Manager
- 2. Campus Emergency Response Team
- 3. Incident Commander
- 4. First Responder
- Etc
- D. Emergency Operations Center
- 1. List of locations team can set up in w/ addresses
- E. Damage Assessment Responsibilities
 - 1. Ordered list of places needing primary evaluation
- 2. Other units
- F. Emergency Response Priorities of Efforts/Support
- List of incident priorities (life, situation stabilization, property,
environment)
- 1. Life
- List of people on campus (students, staff, visitors -- no order)
- 2. Places needed for campus safety
- List them
- 3. Systems that need checking
- List all systems, utilities, communications, networks, shelters, food
supply locations, etc
- 4. Other buildings/facilities
VII. Communications
- Cell Phones
- Texts, emails, call from alert system to students/employees
- Communication system between Emergency Preparedness Team
- Notification via Media
- Company/University website
- Media release
- Other forms
- Radio Station
- Walkie Talkies
- Billboards
VIII. Emergency Response/Operations Communication
- Talk about person who will initiate BCDR Plan
- A. Text Message/Email Alert System
- 1. Activation reasons
- List all reasons for system initiation
- 2. Message Authorization
- Who is allowed to authorize Alert System activation
- 3. Authorized Personnel for Sending Alert System Message
- List everyone allowed to send message
- 4. Message content
- Character amount, number of times messages can be sent,
updates as necessary
- 5. All Clear!
- B. Other notification methods
- List other methods of campus/company communication
IX. Coordination and Declaration of a State of Emergency
- For Level 1 and 2, campus can deal with situations
- First Responders to the scene will help assess situation and advise for further
communication
- When emergency exceeds Level 1 and 2:
 - A. City Government
- B. County Government
- C. State Government
- D. Federal Government
- Long term recovery will depend on damage type
X. Disaster Recovery
- Employee/Student Assistance
- Damage to residence/business/personal property losses
- Public Assistance
- Repair to infrastructure, public facilities, and debris removal
- A. Company Recovery Plan
- 1. Employees
- Temporary housing, grants, loans, other aid
- 2. Hardware
- 3. Property

Disaster Recovery
Technical measures taken to restore fluency of business operations

I. Risk Assessment
- What is at risk versus how critical it is to the companys ability to function
II. Staff operation transfer
- Operation Succession
- Should normal staff not be available, detail who is then responsible for
those duties
III. Operable Location (back-up site)
- Hot/Warm/Cold Sites
IV. Back-up
- Data
- Frequency/Location
- How often is it backed-up? Critical data must be relevant to current
business operations
- Store off-site (At back-up site [common])
- What/How it is backed-up
- Critical business data
- Machine Configuration, Network Configuration, Data
- DVD disks, hard drive mirroring
V. Equipment Replacement
- Note where to purchase replacement in documentation
- This reduces time no shopping, equipment is consistent with replaced
hardware.
VI. Audits
- Purpose: To ensure that the plan works.
- Businesses grow over time
- Critical services must be audited and prepared for worst-case-scenario as
company grows
- As the needs of the company expand, more equipment may be
necessary. Auditing is an important aspect to ensure that all hardware is
accounted for and planned for in the event of a disaster
- Live tests/drills can/are performed to ensure that the plan wont fail should it be
initiated.
- Audits also ensure new material or aspects of the business are kept from falling
through the cracks.
This document did not serve as an assignment, rather an outline used to create a presentation
given in the SCI388 Natural Disasters class. Document contents based on NTW440 Business
Continuity and Disaster Recovery class material provided by Scott Swenka for the purpose of
this project.

Additional References:
http://cert.arizona.edu/sites/default/files/Business_Disaster_Continuity_Plan_November07.pdf
https://www.sans.org/security-resources/policies/general/pdf/disaster-recovery-plan-policy

List of pictures:

Chords coming up out of pole

Cable racks on ceiling
Computers on floor
Library books

Underneath floor tiles