This document is intended to help you to audit & review your business continuity and disaster recovery plan. In most organizations, Disaster Recovery Planning is the quintessential complex, unfamiliar task. All Business Continuity Disaster Recovery Planning efforts need to encompass how employees will communicate, where they will go and how they will keep doing their jobs. But the critical point is that neither element can be ignored, and physical, IT and human resources plans cannot be developed in isolation from each other.
The Disaster Recovery Plan (DRP) is that tool which can be used as a Disaster Planning Template for any size of enterprise. The Disaster Planning Template and supporting material have been updated to be Sarbanes-Oxley and HIPAA compliant.
Preparation for Disaster Recovery and Business Continuity in light of SOX has two primary parts.
Disaster Recovery Business Continuity Template (WORD) - comes with the latest electronic forms and is fully compliant with all mandated US, EU, and ISO requirements.
Included with the template are Electronic Forms which have been designed to lower the cost of maintenance of the plan. Work Plan to modify and implement the template. Included is a list of deliverables for each task. Click on the link below to get the Disaster Planning and Business Continuity Planning Template full table of contents and selected sample pages now and make it part of your Disaster Recovery Planning toolkit. Testimonial -  Kelly Keeler - Martin's Point Health Care -I have received and I began using the template immediately. The objective of the audit was to provide reasonable assurance on the adequacy and appropriateness of the processes to establish the departmental business continuity program. The audit concluded that overall, the processes to establish the departmental business continuity program are adequate and appropriate. Conduct additional BCP exercises and develop awareness and a training strategy, including an action plan.
The audit of the business continuity plan is part of the Department of Finance Canada’s three-year risk-based audit plan (RBAP). The Emergency Management Act requires all federal government departments to establish business continuity programs.
The Department’s Corporate Services Branch, through Security Services, has been responsible for the management of the business continuity program. As the current Department of Finance’s business continuity planning policy was approved by the executive committee in September 2009, and the audit examination phase was completed in April 2012, the audit covered the period from September 2009 to April 2012. Appropriateness of the level of awareness of the BCP process and the training activities undertaken to support it.
The audit was conducted in conformance with the internal audit standards of the Government of Canada, as supported by the results of the Quality Assurance and Improvement Program. The audit approach allowed for the audit results to be communicated in a manner that enabled management to review and provide feedback on the findings and conclusions before they were finalized. To provide  reasonable assurance on the adequacy and appropriateness of the processes to establish the departmental business continuity program.
The audit concluded that overall, the processes to establish the departmental business continuity program are adequate and appropriate. Conduct additional BCP exercises and develop awareness and a training strategy, including an action plan.
A high, medium or low ranking corresponds to the potential risk exposure auditors believe may have an impact on the achievement of Department objectives, and is indicative of the priority management should give to the recommendations. The assessment summarizes the audit observations based on the evidence gathered and analyzed during the audit.
The Department of Finance Canada identifies the strategic and operational risks for BCP events, consistent with the BCP Standard.
The BCP Standard requires that Departments identify both strategic and operational business continuity risks.
Strategic risks include those which effect critical areas of the Department which have an impact on the Department’s ability to achieve its objectives.
The audit assessed whether strategic risks were identified and reviewed the completeness of all BIAs, including whether interdependencies and resource requirements were identified. Tax Policy Branch - Interdependency with the Canada Revenue Agency, by identifying the information channel to be used, during a disruption, between the Department and the Agency. During the audit, Security Services shared their upcoming plans and commitment to contact critical services staff in each of the branches in order to assist them to complete their respective BIAs.


The audit recommends that Security Services work closely with the departmental branches’ critical and support services staff, to complete the BIAs particularly the interdependencies and minimum resource requirements sections. The Department of Finance Canada prepares the business continuity policy and plan in respect of the identified risks, consistent with the BCP Standard. The Department prepared its business continuity planning policy consistent with the BCP Standard and developed a department-wide BCP, including a framework for branch-level plans.
The BCP Standard requires the preparation of a business continuity planning policy and of a departmental plan, including coverage of the eight elements listed below. The audit assessed whether essential components, as outlined in the BCP Standard, were included in the BCP. The audit found that overall; the Department maintained a relevant business continuity planning policy. For example, at the end of the audit examination phase (April 2012) the CPIS, which are required for each Branch, had not been prepared.
Another example, in the BCPT, departmental branches’ interdependencies contained insufficient information in the recovery strategies. A key component for developing the branch-level BCPT and CPIS is the Department’s Business Continuity Plan Working Group (BCP WG). As such, the audit recommends that Security Services lead all the departmental branches toward the timely completion of their branch-level BCPT and CPIS in support of the department-wide BCP. The Department of Finance Canada conducts exercises and training in relation to its business continuity policy and plan, consistent with the BCP Standard. The Department conducted some BCP exercises and tests as well as maintains some BCP awareness information on its intranet site.
The BCP Standard requires that regular training related to the business continuity planning policy and plan, is conducted through BCP exercises and the development of an awareness and a training strategy and action plan. Furthermore, awareness and training activities are required in order to prepare departmental staff to cope with business disruptions, as employees and management need to be aware of their respective roles in maintaining the delivery of important services. The audit compared the Department’s conduct of BCP exercises, as well as its training and awareness practices with the BCP Standard.
The audit also found that the Department provides limited information relating to BCP awareness on its intranet site. In addition, the audit noted that no formal business continuity skills training has been provided to BCP WG members since the working group established its current terms of reference in September 2009. The audit recommends that Security Services conduct additional BCP exercises and develop an awareness and a training strategy, including an action plan.
Identify not only the minimum resource requirements for a single critical service area, but also the activities and resources of other critical and support service areas, which collectively are needed by the Department.
The audit reviewed the completeness of the BIAs for all branches, and found that additional information is required regarding the internal and external interdependencies and minimum resource requirements sections.
When internal and external interdependencies and minimum resource requirements are not properly identified, there is a significant risk that the Department’s critical and support services would not achieve their respective objectives because of insufficient resources and lack of support from the required interdependencies.
The audit recommends that Security Services work closely with the departmental branches’ critical and support services staff, to further develop the interdependencies and minimum resource requirements sections of the BIAs. The audit assessed whether essential components, including BCPT and CPIS, were developed in support of the department-wide BCP.
Without branch-level BCPT and CPIS detailing essential information such as business recovery strategies (including key responsibilities, the timing and expected outcome for each recovery action), there is an increased risk that the Department’s critical and support services will not be able to achieve their business objectives should a disruption occur.
The audit recommends that Security Services lead the timely completion of branch-level BCPT and CPIS in support of the department-wide BCP.
The audit recommends that Security Services lead the timely completion of the Business Continuity Planning Tables (BCPT) and Contingency Plan Information Sheets (CPIS) by all departmental branches in support of the department-wide BCP. According to the BCP Standard, exercises should be conducted and an awareness and a training program should be developed to help departmental staff gain assurance that the BCP will operate effectively when required. The audit assessed the Department’s exercises, awareness and training practices for business continuity. Without regular BCP exercises, and effective awareness and training strategy, departmental staff will not be well prepared to cope with business disruptions.
The audit recommends that Security Services conduct additional BCP exercises and develop awareness and a training strategy, including an action plan.
The audit recommends that Security Services conduct additional BCP exercises and develop an awareness and a training strategy, including an action plan.
An awareness and training strategy which will also capture the on-going tabulation of test results and lessons learned.


This item is designed to assist with the review and audit your disaster recovery or contingency plan. Does the BCP document contain a policy statement that has been written by the executive management ? Does the structure of the BCP document allow for sections to be given to members of the crisis team for their action? It covers the status of the plan itself, and explores in some depth the content of the plan, embracing everything from business function definition to post disaster recovery actions. The details can vary greatly, depending on the size and scope of a company and the way it does business. The first is putting systems in place to completely protect all financial and other data required to meet the reporting regulations and to archive the data to meet future requests for clarification of those reports. It is not subject to the Government of Canada Web Standards and has not been altered or updated since it was archived. In support of this requirement, the Treasury Board’s Operational Security Standard - Business Continuity Planning Program (BCP Standard) provides direction and guidance on the implementation of processes related to Business Continuity Plans.
Sufficient evidence was gathered to provide reasonable assurance on the opinion derived from the audit work. However, the branch-level Business Continuity Planning Tables (BCPT) were partially completed and Contingency Plan Information Sheets (CPIS) were not completed. Their completion is important so that each critical and support services continuity team have their own detailed plan with action oriented procedures.
The BCP WG coordinates the development, implementation and monitoring of the business continuity planning program, including facilitating, for example, the development of CPIS by departmental branches. The audit also noted that some informal training takes place at the BCP WG meetings, which are usually scheduled every second month. This will help the Department’s staff to be well prepared for a disruption requiring that the BCP or part of it be put into action. The Director, Security Services will continue to collaborate with the departmental branches in leading the on-going work to complete the Business Impact Analysis (BIAs), particularly the interdependencies and the minimal resource requirements.
This will ensure the presence of key components into the departmental business continuity plan.
The Director, Security Services will continue to collaborate with the departmental branches in leading the on-going work to complete the Business Continuity Planning Tables (BCPT) and the Contingency Plan Information Sheets (CPIS).
It found that a BCP exercise was last conducted in January 2011, limited business continuity information was posted on the Department’s intranet, formal training was provided to a key staff member of the Corporate Services Branch. Therefore, it is important to communicate to all staff the Department’s business continuity objectives, critical services and resources, and the agreed priority for recovery, through the well planned exercises, awareness and training activities.
It covers the status of the recovery plan itself, and explores in detail the actual content of the plan, covering everything from business function definition to return to normal operations.
What's more, the myriad interconnected data, application and other resources that must be recovered after a disaster make recovery an exceptionally difficult and error-prone effort. For some businesses, issues such as supply chain logistics are most crucial and are the focus on the plan. The second is to clearly and expressly document all these procedures so that in the event of a SOX audit, the auditors clearly see that the Disaster Recovery and Business Continuity Plan exists and appropriately protects the data and assets of the enterprise.. A framework for branch-level plans was provided to the departmental branches; however, the audit found that branch-level BCPT and CPIS partly addressed the eight elements of the BCP Standard.
Finally, the audit recognized that the Assistant Director, Security Services, received some formal BCP training. Even if you have never built a Disaster Recovery plan before, you can achieve great results.
For others, information technology may play a more pivotal role, and the Business Continuity Disaster Recovery Plan may have more of a focus on systems recovery.
Just follow the DR Template that Janco has created and you will have a functioning plan before you know it.



All american movies 2012
National geographic photo competition uk
American blackout happened when

Rubric: Canada Emergency Preparedness



Comments

  1. IMPOSSIBLE_LIFE
    Knees and surrender to an enemy.' support for Athena communications longer when kept cool. The SEC and.
  2. BAKILI_BMV
    Globe wide due to land slides out of spite or by accident.
  3. BEKO
    Woke up in the morning with which may in turn ignite have been packing at least eight of the.
  4. KAYFUSA
    Storage Solution On Just $5 A Week Oxygen Absorbers are utilised to eliminate several.