Incident Communication Plan added to Disaster Recovery Business Continuity Template Version 6.0 -- Just Released
When a business interruption occurs employees, customers, and suppliers need to know what the status of the enterprise is. Can order be taken; can deliveries be made; can services be provided; and can products be shipped are questions that need to be answered in a timely manner. With the latest version of the DRP / BCP Template an incident and media communication plan is included.
A thorough disaster recovery plan is essential to minimizing the damage that a natural or technological catastrophe inflicts on your business. For many IT professionals, the amount of time it takes to develop such a plan, and the complex process required to complete it, makes disaster recovery planning a daunting task.
The Disaster Recovery & Business Continuity Template provides a comprehensive, proven blue-print for disaster planning that is completely current with today's compliance and best practices, including ISO 27000, HIPAA and Sarbanes-Oxley. Even if your company isn't governed by these compliance standards, it is in the best interest of your company to follow the best practices outlined in this template.
The main template is an editable Microsoft Word document that steps you through all of the critical areas of disaster recovery. The wealth of information in this template alone can save you many weeks of research and analysis.
Be Prepared Before Disaster Strikes Your Business
The main disaster recovery plan (DRP) template is over 200 pages long and includes everything needed to customize the Disaster Recovery Plan to fit your organization's specific requirements. The document includes proven written text and examples for the following major sections of a disaster recovery plan:
- Plan Introduction
- Business Impact Analysis - including a sample impact matrix
- Organization Responsibilities pre and post disaster - DRP checklist
- Backup Strategy for Data Centers, Departmental File Servers, Wireless Network servers, Data at Outsourced Sites, Desktops (In office and "at home"), Laptops and PDA's.
- Recovery Strategy including approach, escalation plan process and decision points
- Disaster Recovery Procedures in a check list format
- Incident/Media Communication Plan
- Plan Administration Process
- Technical Appendix including definition of necessary phone numbers and contact points
- Job Description for Disaster Recovery Manager (3 pages long) - entire disaster recovery team job descriptions are available.
- Work Plan to modify and implement the template. Included is a list of deliverables for each task. (Risk Assessment and Vulnerability Assessment)
In addition, you will find an extensive section that demonstrates how a full test of the DRP can be conducted. This section includes:
- Disaster Recovery Manager Responsibilities
- Distribution of the Disaster Recovery Plan
- Maintenance of the Business Impact Analysis
- Training of the Disaster Recovery Team
- Testing of the Disaster Recovery Plan
- Evaluation of the Disaster Recovery Plan Tests
- Maintenance of the Disaster Recovery Plan
Last, but not least, today's top compliance standards are specifically addressed. These include ISO 27000 (formerly ISO 17799), Sarbanes-Oxley, PCI-DSS and HIPAA. In total, it's a complete disaster recovery solution which will save you and your team countless hours of research and planning.
Incident Communication Plan Template
To survive an incident such as a business interruption, security breach, or a product recall, organizations need more than a successful communication strategy - they need an incident communication plan.
The overall objectives of a incident communications plan should be established at the outset. The objectives should be agreed upon, well understood, and publicized. For example, will the primary objective of the communications plan be for communications only to employees, and only during a disaster? Or is the intent to advise customers of interruptions to service? Or is it for investors and stockholders? Or regulatory agencies? Or is it some combination of these?
The specific objective of this incident communication plan is to define who will provide key communications during a crisis and the content, recipients, schedule, method of delivery, frequency and priority of the communication. By outlining communications in advance, ENTERPRISE
- Protect the effect of a crisis on employees, associates, suppliers and customers,
- Reduce the impact of bad publicity, maintain customer service, bolster relations with vendors and
- Addresses the concerns of other key stakeholders
The policy template contains a clear definition of objectives along with an easily modifiable policy statement with guidelines for:
- Media requests for information
- Editorial or letter to the editor requests
- Requests for interviews
- Emergency responses (business continuity, security breaches, and other "bad news" situations)
- Unannounced visits from media (TV reporters at your front door)
- Press releases
In addition the template includes best practices for press conferences and media relationships, as well as a 3 page job description for a Director of Media Communications.