| Many more companies have come to realize that | | | | company's recovery plans. Each test should have |
| the development and implementation of a | | | | objectives and the results should be documented |
| Business Continuity Program is now a good | | | | and any discrepancies between expectations and |
| business practice. The existence of this program | | | | actual results addressed. |
| gives the executives, the staff, the Board of | | | | No finger pointing is allowed. Take an objective |
| Directors and shareholders a feeling of confidence | | | | look at why the plan did not work as expected. |
| in the effective and quick recovery of the | | | | Was a critical update missed? Were the |
| business operations in the event of a disaster. | | | | objectives set too high for the level of |
| Every year the plan gets that Auditor's tick mark | | | | experience of your test team and testing |
| and people point to the report and says that they | | | | program? There is no sense in trying to recover |
| are covered should a disaster occur. And every | | | | your complete company during the first or |
| year the plan gets put back into the binder and | | | | second exercise. You need to take small gradual |
| put back on the shelf only to be dusted off next | | | | steps to develop your team's confidence in their |
| year. | | | | capability to properly execute the instructions in |
| So could you really recover using your plan | | | | the plan. Too fast and they will become |
| documentation? | | | | disheartened, to slow and they will become bored. |
| Do you know what is in your plan? Has your plan | | | | Once you have implemented your testing |
| been updated with all of the technology and | | | | program and your team has gained confidence in |
| business changes that have occurred this year? | | | | their capability then you can start to set harder |
| Has it been tested? An untested plan is not any | | | | to reach goals. |
| better than not having a plan. If the plan has not | | | | Along with the testing program, you also need to |
| been kept up-to-date then it is best left in the | | | | implement a proper maintenance program for the |
| binder during a disaster because it will only hinder | | | | plan documents. Once you have put these |
| your recovery not help it take place. | | | | programs in place only then can you and those |
| Testing can be passive for business plans and | | | | people who rely on your company be sure that |
| crisis management plans and active for technology | | | | the company could be recovered quickly and fully |
| recovery plans. You need to implement a | | | | after a disaster event. |
| comprehensive testing program for all of your | | | | |