Business Continuity Terminology
A disaster recovery plan describes all the components needed to bring a business back on line. For example a plan could detail what components vendors have in stock and available at a moments notice and also provide lists of alternative approaches that could be used in the event of a geographic disaster.
A business continuity plan, on the other hand, describes all the procedures and processes required to keep the outcome of a particular service available at all times, no matter how big or small a disaster might come along. For example, course registration is becoming web-based. A disaster recovery plan would list all the hardware, software and documentation required to repair or replace a service, and any hardware, software or network interdependencies that would dictate a certain order to bringing the service of course registration back to life. This could be as simple (but cumbersome) as having students submit paper forms with preference 1, 2, 3 and 4 for courses. A business continuity plan shows how a business unit can keep functioning, even if at a low level, while the full recovery process goes on in the background.
Risk Management is a process consisting of well-defined steps which, when taken in sequence, support better decision making by contributing to a greater insight into risks and their impacts. It is as much about identifying opportunities as it is about avoiding losses. By adopting effective Risk Management techniques it's possible to improve safety, quality and business performance in the company.
|