Business Continuity and Planning & DRP

Class Assignment

Under Guidance:-
Dr. Madhvendra Mishra

Submitted By:-
Gokul Krishnan B (IMB2018012)
Justify the capability of auditing-based approach to understanding BCP over a solution-
based approach.

Solution

Business continuity planning is defined as a proactive planning process that ensures the provision
of critical services or products in the event of an outage. It does not intend to cover all the services
or activities of an organization, but only those considered "essential" for the continuous
functioning of an organization. Business continuity planning is not emergency management, but a
related activity. While business continuity planning emphasizes the continued provision of
services, emergency management is more concerned with minimizing accident damage and
controlling it as quickly as possible.

BUSINESS CONTINUITY MANAGEMENT

Auditing based Approach

The purpose of the audit is to provide guarantees regarding the adequacy of the management
control framework and internal controls put in place to maintain and operate the BCP program at
all times. The scope of the audits includes the governance framework of the business continuity
planning, the management controls of the BCP program, including management controls designed
to ensure that the BCPs are developed, tested and updated, if necessary. The audit scope also
includes an in-depth assessment of the adequacy of the CCPs to ensure the continuity of essential
services in the event of an interruption; this determination can be made only by the complete text
of the plans.
Solution-based approach

It indicates that it is not necessary, or always preferable, to know the cause of a problem to create
a solution. It is also doubtful that we can know the real cause of some problems because business
problems are often so complex, dynamic, fluid and systemic. An empirical approach to a solution-
based approach is to determine what works for you, so do more. The solution-based approach
encourages business leaders to establish specific, measurable, achievable, relevant and time-based
SMART goals. This approach is mainly based on time series solutions and not on truly preferred
methods.

Conclusion

The scope of the audit also includes a thorough assessment of the adequacy of the CCP for the
continuity of essential services in the event of interruption; this determination can be made only in
the full text of the plans, while the solution approach encourages business leaders to set specific,
measurable, achievable, relevant and time-based SMART objectives, but in general, the solution
approach is mainly based on the solutions, time-series and not on a truly recommended method.
In addition, these solutions are not tested on the dynamic response, which could outdate them