I.B.4     Business Continuity

Business continuity is defined as the ability to maintain operations and services, both technology and business, in the event of a disruption to normal operations and services. The board of directors should oversee implementation and approve policies relating to business continuity planning. Senior management should establish and implement policies, standards, and procedures and define responsibilities for enterprise-wide business continuity planning. Because business continuity is important for both business processes as well as technology operations, business continuity planning should be approached on an enterprise-wide basis. Business continuity planners should assess the ability for all lines of business to remain resilient or recover from disruptions or degradations. The business continuity function often resides in the risk management organizational structure. A specific member of management should be assigned responsibility for the oversight of the business continuity function, and both business and technology departments should assign personnel to develop and maintain the individual business unit plans. Refer to the IT Handbook's "Business Continuity Planning" booklet for more information.


Previous Section
I.B.3 Project Management
Next Section
I.B.5 Information Systems Reporting