In this phase, the intended objectives go through defining a
set of tests designed to verify that the plans are adequate to ensure the
continuity of the services and critical processes identified, instruct all the
personnel and define the necessary procedures to keep both the documentation
updated. as procedures.
Test plan
A Test Plan, as its name suggests, is a set of selective
checks that must verify that the Business Continuity Management System is
adequate to ensure the continuity of the critical services and processes
carried out in the organization.
Performing periodic tests will help identify weaknesses,
inconsistencies or aspects to improve in
the organization's Business Continuity Management System .
In the phase, you must define what you want to test and how
deeply to do it . For this, it will be necessary to state the objectives
pursued with each test to be carried out.
Objectives that should be aimed at:
1. Confirm
the effectiveness of the recovery process.
2. Confirm
the estimated time for the recovery of the processes.
3. Verify
that the set of "recovered" processes continues to be carried out at
an acceptable level of service.
4. Verify
that the Business Continuity Management System is complete in all its parts.
The more precise the definition of the objectives to be
achieved , the greater the utility resulting from the tests to be carried out.
In scope, testing can affect a single critical process in the Recovery Plan ,
or it can be based on a scenario that affects multiple critical processes.
The decision on the scope of the tests to be carried out is
conditioned by the resources necessary to carry them out, which undoubtedly
affects the cost of preparation and implementation. Each test must have its own
evaluation criteria .
These criteria go beyond the mere verification that the
processes were recovered adequately, in such a way that it should tend towards
indicators that provide a measure of the efficiency of the plan, for example,
considering the recovery time of systems and processes.
Based on the results obtained with the evaluation criteria
defined above, an information and reporting procedure must be established for
the Continuity Committee.
Training plan
The Training Plan should aim to instruct all the
organization's staff , and especially those people involved in the Business
Continuity Management System that has been defined, about the importance of
business continuity for the organization and on the actions to be carried out.
All the organization's personnel must know both the
objective and the importance of the Business Continuity Management System and a
high-level vision of the actions to be carried out during the crisis management
and recovery processes.
It is important to note that it would be very useful for the
training aimed at the people directly involved in the actions contained in the
plan to be completed through the different test procedures carried out, which
would allow each of these people to have a precise knowledge what your tasks
and responsibilities are in the event of a disaster.
The minimum tasks that the Training Plan must have would be:
1. Appoint
the instructor or trainer.
2. Identify
the staff to direct the training to. This identification should be carried out
by building homogeneous groups, for example, by area, Directorate or
Sub-Directorate ... The resulting groups will be divided into personnel that is
directly related to continuity and personnel not involved.
3. Prepare
the content and material of the training. This content should highlight the
importance of business continuity for the organization, publicize the different
procedures, propose examples and present real cases, interesting readings, etc.
4. Conduct
training to designated instructor (s).
5. Establish
a training schedule.
6. Have an
Update Plan for the Training Plan, both in terms of content and training
actions.
Finally, it should be noted that it must be valued that the
training can be both face-to-face and not face-to-face.
Update and Maintenance Plan
Any Management System, including one on Business Continuity,
needs to be permanently updated . Any organization is subject to permanent
changes: organizational, location, procedural, new services to be included in
the plan, etc.
All these changes inevitably affect the designed system, and
if it is not reviewed and modified, as appropriate, it can become ineffective.
At least, after carrying out the first test of the Business Continuity Plan ,
it will be when it must be checked whether what is written has been fulfilled
or, on the contrary, there are deviations that must be corrected.
bloggerelle entertainmentweeklyupdates countrylivingblog theallureblog technoratiblog
