Business Continuty Plan

  • Upload
    zamanbd

  • View
    212

  • Download
    0

Embed Size (px)

Citation preview

  • 8/18/2019 Business Continuty Plan

    1/3

    Business Impact Analysis for Business

    Continuity

    Maximum Acceptable Outage (Denition): Te Maximum Acceptable Outage

    (MAO) is te maximum amount of time a system can be una!ailable before

    its loss "ill compromise te organi#ation$s ob%ecti!es or sur!i!al& 

    Maximum Tolerable Do"ntime (Denition): Te maximum lengt of time a

    business function can be 'iscontinue' "itout causing irreparable arm to

    te business&

    eco!ery oint Ob%ecti!e (O): A reco!ery point ob%ecti!e* or +O,* is

    'ene' by business continuity planning& It is te maximum targete' perio'in "ic 'ata migt be lost from an IT ser!ice 'ue to a ma%or inci'ent&

    eco!ery Time Ob%ecti!e: Te reco!ery time ob%ecti!e (TO) is te targete'

    'uration of time an' a ser!ice le!el "itin "ic a business process must be

    restore' after a 'isaster (or 'isruption) in or'er to a!oi' unacceptable

    conse-uences associate' "it a brea. in business continuity&

    Mean Time Bet"een /ailure :(MT/0MTB/): Mean time bet"een failures (MTB/)

    is te pre'icte' elapse' time bet"een inerent failures of a system 'uring

    operation&123 MTB/ can be calculate' as te aritmetic mean (a!erage) timebet"een failures of a system&

    Mean Time to epair0eco!er (MT0MTT): Mean Time To epair (MTT) is a

    basic measure of te maintainability of repairable items& It represents te

    a!erage time re-uire' to repair a faile' component or 'e!ice&123 4xpresse'

    matematically* it is te total correcti!e maintenance time 'i!i'e' by te

    total number of correcti!e maintenance actions 'uring a gi!en perio' of

    time&

    Consider the following scenario.

    5tage 2: Business as usual

    http://en.wikipedia.org/wiki/Business_continuity_planninghttp://en.wikipedia.org/wiki/Datahttp://en.wikipedia.org/wiki/Business_processhttp://en.wikipedia.org/wiki/Business_continuityhttp://en.wikipedia.org/wiki/Mean_time_between_failures#cite_note-1http://en.wikipedia.org/wiki/Arithmetic_meanhttp://en.wikipedia.org/wiki/Failurehttp://en.wikipedia.org/wiki/Repairablehttp://en.wikipedia.org/wiki/Arithmetic_meanhttp://en.wikipedia.org/wiki/Mean_time_to_repair#cite_note-1http://en.wikipedia.org/wiki/Corrective_maintenancehttp://en.wikipedia.org/wiki/Datahttp://en.wikipedia.org/wiki/Business_processhttp://en.wikipedia.org/wiki/Business_continuityhttp://en.wikipedia.org/wiki/Mean_time_between_failures#cite_note-1http://en.wikipedia.org/wiki/Arithmetic_meanhttp://en.wikipedia.org/wiki/Failurehttp://en.wikipedia.org/wiki/Repairablehttp://en.wikipedia.org/wiki/Arithmetic_meanhttp://en.wikipedia.org/wiki/Mean_time_to_repair#cite_note-1http://en.wikipedia.org/wiki/Corrective_maintenancehttp://en.wikipedia.org/wiki/Business_continuity_planning

  • 8/18/2019 Business Continuty Plan

    2/3

    At this stage all systems are running production and working correctly.

    5tage 6: Disaster occurs

    On a given point in time, disaster occurs and systems need to be recovered. At this point the

    Recovery Point Objective (RPO) determines the maximum acceptable amount of data loss

    measured in time. For example, the maximum tolerable data loss is 1 minutes.

    5tage 7: eco!ery

    At this stage the system is recovered and back online but not ready for production yet. !he 

    Recovery Time Objective (RTO) determines the maximum tolerable amount of time needed to

     bring all critical systems back online. !his covers, for example, restore data from back"up or fix

  • 8/18/2019 Business Continuty Plan

    3/3

    of a failure. #n most cases this part is carried out by system administrator, network administrator,

    storage administrator etc.

    5tage 8: esume ro'uction

    At this stage all systems are recovered, integrity of the system or data is verified and all critical

    systems can resume normal operations. !he Work Recovery Time (WRT) determines themaximum tolerable amount of time that is needed to verify the system and$or data integrity. !his

    could be, for example, checking the databases and logs, making sure the applications or services

    are running and are available. #n most cases those tasks are performed by application

    administrator, database administrator etc. %hen all systems affected by the disaster are verified

    and$or recovered, the environment is ready to resume the production again.

    !he sum of &!O and %&! is defined as the Maximum Tolerable Downtime (MTD) which

    defines the total amount of time that a business process can be disrupted without causing any

    unacceptable conse'uences. !his value should be defined by the business management team or

    someone like C!O, C#O or #! manager.

    !his is of course a simple example of a (usiness Continuity$)isaster &ecovery plan and should

     be included in your Business Imact !nalysis (BI!).