Business resumption planning: Exercising your emergency response teams

Disaster simulation exercises are used to test the staffing, management, and decision making aspects of both the computer and non-computer related aspects of an organization's business resumption plans. A proven approach to designing and conducting these simulation exercises is presented, including the full script of an actual simulation exercise. A film of the exercise is available. During the 1980s, contingency planning has evolved from data center backup planning, to business resumption planning (BRP). Business resumption planning involves arranging for emergency operations and recovery planning. A BRP is required for all of an organization's information systems related functions and non-computer related business units. However, unless these BRPs are tested periodically, they seldom are operationally usable. Plans that were initially operationally viable become obsolete very quickly unless periodic tests force every department and work group to maintain off-site: up-to-date contact lists; files and processing resources; communications resources; and current programs, procedures, and forms.