IA2: Business Continuity Plan for Information Technology
CSEC 650
University of Maryland University College

Abstract
Business contingency and continuity of operations plan are vital to business, especially those reliant on digital media. Whether through nature events or the more likely interruption of computer systems and networks, a disruption of any type is a serious business concern. A disruption can harm operational revenue, services, supply-chain, and reputation. Any of the preceding effects from a disruption could possibly be severe enough to mean the end of business as a going concern. To avoid severe or long term damaging disruption, a comprehensive contingency plan can provide a guide for how resources and personnel will be allocated in the event of a crisis.

Keywords: Business Continuity Plan (BCP), Information Technology, contingency plan

Table of Contents

Business Continuity Plans 4 Planning Steps 5 Business Impact Analysis 6
Recovery Strategies 8 Data Backup 10 IT Personnel Training 10 Alternate Site 11
Contingency Plan Development 12 Training and Testing 13 Recommended Training and Testing 14 Test Schedule 15
Summation 17
References 18

Business Continuity Plans
Greater numbers of businesses now must consider the protection of their computer information systems as a vital aspect of their operations. Even as organizations became ever more reliant on computer systems over the past several decades, information technology (IT) contingency planning was not a high priority. In recent years that has changed as the need to protect systems, networks, and information has become a necessity (Neal, 2013). The importance of protecting a business’s IT has become a critical part of shaping the plans and policies at most companies; or at least should be for companies that have not considered the ramifications of not prioritizing the protection of their IT