ISSC481 IT Security Planning and Policy

You have been tasked with developing a business continuity plan for the university. Begin by making a list of all of the tasks that are required to complete the assignment.

You must first begin with a risk assessment and business impact analysis. Write a draft memo to the president of the university explaining the need for a business continuity plan. Be sure to include your recommendations on how you would implement a successful plan.

Developing business continuity plan for University

The purpose of the business continuity plan of University is to improve response and readiness while guiding departments during any disruptive events to continue functions. It also intends to identify improvements and process for eliminating the amount of resources and time needed for resuming business.

Risk assessment:

The identification of critical functions relating to the welfare and health of employees and student at University and reinstating the functions as an educational institution is the impact of business analysis. There are two areas of concern in the business impact analysis comprising of level one and level two. Level one relates to critical functions that influences the continuity of business and level two relates to critical functions that influence the safety and health of staffs and students at University. The associated cost time and recovery point objectives would be defined by recovery point objectives. The team would also consider impact of regulatory and legal requirement and this involves data availability, privacy and required notifications (Sahebjamnia et al.,2015).

Business impact analysis:

The success of business continuity planning depends upon assessment of risk. Risk assessment of University would consider the impact of different disruption scenarios on students and institutions. It would also incorporates probability of occurrence of risk that is based on rating system of low, medium and high (Torai et al., 2014). University should be capable of analyzing the threat by not measuring the impact on institution rather by determining its impact on institution.  

References:

Sahebjamnia, N., Torabi, S. A., & Mansouri, S. A. (2015). Integrated business continuity and disaster recovery planning: Towards organizational resilience. European Journal of Operational Research, 242(1), 261-273.

Torabi, S. A., Soufi, H. R., & Sahebjamnia, N. (2014). A new framework for business impact analysis in business continuity management (with a case study). Safety Science, 68, 309-323.