CASES.LU

Knowhow

Security Policy – Managing business continuity

Operational continuity

The operational continuity of the organisation implies that resources deemed to be important or vital (see Classification and control of resources) should be in good working order under all circumstances.

Depending on their type, these resources may suffer the following damage:

A certain number of rules established in this document (see physical security) are intended to reduce the likelihood of damage. However, it should be remembered that damage can occur and plans should be put in place for this eventuality.

One of the following scenarios should be chosen for each of the resources indexed in Classification and control of resources:

  • nothing planned.
  • this is data: backups – especially off-site backups – are sufficient.
  • an application: backups are sufficient.
  • an application: backups are associated with a maintenance agreement with a qualified supplier which can reinstall and/or reconfigure the application in under XX days,
  • hardware that can be repurchased, delivered and installed in less than XX days.
  • hardware for which a maintenance agreement with the supplier guarantees it being restored to working order within a period of XX days.
  • hardware for which we have backup hardware stored in XX premises.
  • hardware for which we have an agreement with a supplier which guarantees an equivalent replacement being made available within XX hours/days.
  • hardware with equivalent configuration which can be accessed on the XX site.

During the annual review of the list of resources, the question should be asked again to see if the same solution is still applicable and best suited to meet requirements.

Similarly, in the event of the total loss of premises and technological and IT resources, it would be better to plan for business to recommence in other premises within the shortest possible time. Resources which are non-essential, but which the company must have at minimum (e.g.: telephones and PCs) can be obtained from our suppliers within a specified time frame.

Table of Contents