Contents -- 1 Introduction 1 -- 1.1 Purpose and Scope 2 -- 1.2 How to use This Book 3 -- 1.3 Current Standards and Literature 3 -- 1.4 Business Continuity and Disaster Recovery 4 -- 1.5 Gap Analysis 6 -- 1.6 Integration aof the Organization 7 -- 1.7 Business and IT 7 -- 1.8 Health and Safety 10 -- 1.9 Security 12 -- 1.10 Terrorism 13 -- 1.11 Finance and Motivation -- 1.12 Insuring for Disaster -- 2 Approach 19 -- 2.1 Key Components of Operation 20 -- 2.2 Events and Event Responses -- 2.3 Facets of Business Continuity -- 2.4 Legacy Approach -- 2.5 Continuity -- 3 Methodology 31 -- 3.1 Overview -- 3.2 Offensive Stream -- 3.3 Defensive Stream -- 3.4 The Maturity Model -- 3.5 Achievement and Quality Assurance -- 3.6 Knowledge Transfer and Resource Management -- 3.7 Communication -- 3.8 Problem Solving and Root Cause -- 4 Level 1: Rationalization 47 -- 4.1 Organizational Positioning 48 -- 4.2 Team Structure 50 -- 4.3 Roles and Responsibilities 54 -- 4.4 Resourcing 55 -- 4.5 Management Tools 57 -- 4.6 Security and Safety 58 -- 4.7 Level 1 Performance Indicators 58 -- 5 Level 2: Risk Reduction 61 -- 5.1 Vulnerability Analysis 62 -- 5.2 Corrective and Preventative Action 63 -- 5.3 Risk Identification 64 -- 5.4 Risk Mitigation 66 -- 5.5 Security and Safety 68 -- 5.6 Level 2 Performance Indicators 71 -- 6 Level 3: Rating 73 -- 6.1 Business Impact Assessment 74 -- 6.2 Criticality Rating 78 -- 6.3 Quantitative Analysis 81 -- 6.4 Risk Rating 86 -- 6.5 Security and Safety 87 -- 6.6 Level 3 Performance Indicators 88 -- 7 Level 4: Rigor 89 -- 7.1 Change and Configuration Management 91 -- 7.2 Contingency Planning 97 -- 7.3 Crisis Management 100 -- 7.4 Design Assurance 100 -- 7.5 Backup and Tape Management 101 -- 7.6 Security and Safety 103 -- 7.7 Level 4 Performance Indicators 107 -- 8 Level 5: Robustness 109 -- 8.1 Server Consolidation 110.

8.2 Storage Area Network (SAN) 111 -- 8.3 Enterprise Application Integration (EAI) 112 -- 8.4 Common Operating Environment (COE) 114 -- 8.5 Distributed Systems 115 -- 8.6 Renewal 116 -- 8.7 Security and Safety 117 -- 8.8 Level 5 Performance Indicators 119 -- 9 Level 6: Resilience 123 -- 9.1 Capability Configuration 124 -- 9.2 Replication 125 -- 9.3 Data Integrity 126 -- 9.4 Data Redundancy 128 -- 9.5 Geographic Diversity 129 -- 9.6 People and Process 131 -- 9.7 Associated Benefits 132 -- 9.8 Security and Safety 133 -- 9.9 Level 6 Performance Indicators 133 -- 10 Level 7: Recovery 137 -- 10.1 Capability Configuration 138 -- 10.2 Recovery Profiling 139 -- 10.3 Fail-Over Scenarios 140 -- 10.4 Disaster Declaration 142 -- 10.5 Fail Back 143 -- 10.6 Environment Management 144 -- 10.7 License Management 146 -- 10.8 Location 147 -- 10.9 Workplace Recovery 148 -- 10.10 Testing 149 -- 10.11 Security and Safety 151 -- 10.12 Level 7 Performance Indicators 151 -- 11 Continuity Assurance Achievement Rating (CAAR) 155 -- 11.1 Rating Matrix 155 -- 11.2 Capability Scoring 164 -- 11.3 Maturity Progression 164 -- 11.4 Audit 165 -- 12 Quality Assurance 167 -- 12.1 Fundamental Concepts 167 -- 12.2 Framework 168 -- 12.3 Purpose and Strategy 168 -- 12.4 Quality Balance 171 -- 12.5 Approach 172 -- 13 Outsourcing and Commercial Management 175 -- 13.1 Insource or Outsource 175 -- 13.2 Recovery Site Providers 177 -- 13.3 Request for Proposal (RFP) 180 -- 13.4 Running a Commercial Process 181 -- 13.5 Vendor Selection 183 -- 13.6 Negotiating Contracts 184 -- 13.7 Ethics 185 -- 14 Case Studies 187 -- 14.1 Study 1: Telecommunications 187 -- 14.2 Study 2: Mining and Energy 193 -- 15 Summary 197 -- Acronyms and Abbreviations 199 -- About the Author 203 -- Index.