Business Continuity
Business Impact Analysis (BIA)
A business impact analysis identifies the key technology, business processes, resources, and critical service providers who support the services and products your organization provides. The process of the BIA determines potential impacts, major risks, and objectives in the event of a business disruption. The information acquired from the BIA identifies business recovery requirements which are the basis for developing and implementing effective recovery strategies for your organization.
Business Continuity Planning (BCP)
A Business Continuity Plan prioritizes recovery requirements as well as defines the procedures and actionable plans to be used to recover business operations after any type of incident. The information gathered during the BIA information gathering sessions is used to develop a BCP that will address all critical functions across your organization. ESC consultants provide expert analysis of industry best practices and strategic governance which will ensure the overall effectiveness of the BCP. The plans are developed to confirm they are concise, intuitive, and easy to follow and maintain.
Tabletop Training Exercises
A critical component of maintaining an effective BCP is to confirm that key resources understand their roles and responsibilities during the response to and recovery from a business disruption. Periodic tabletop training exercises provide the opportunity for all resources to learn as a team and become familiar with the processes to be completed as well as understanding their role in the process. The exercises also identify any gaps that may exist, while enabling the coordination of recovering the organization business operations. The exercises enable your organization to evaluate the effectiveness of the BCP by discovering unknown gaps and allowing your teams to mitigate them before an actual incident occurs.
Business Continuity Program Review
A review and analysis of your organizations current program evaluates the response and recovery capabilities through an examination of the existing plans and procedures. The thorough review will provide the guidance for enhancing resiliency around loss of facilities, technology resources and key services providers. This will ensure the right processes are in place to support your organization in its continuity of operations and client servicing.
IT Disaster Recovery Plan Support
ESC will provide expertise and best practices to help your IT Team prepare for the event of a disaster. Our consultants will perform a review of current IT disaster recovery plans and procedures in support of developing an effective DR program. Our analysis will examine the recovery priorities and objectives that have been assigned to each application and business process in relation to business unit requirements.
ESC will also partner with your IT Team to review the recovery timeline to determine if the recovery objectives can be met by the recovery strategy. Recommendations will provide guidance on how to address identified gaps and document system and application recovery procedures.
Annual Plan Maintenance and Update
ESC will assist in protecting your organization business continuity program by providing periodic reviews, updates and recommended improvements to business continuity plans and the IT incident response recovery plan. This on-going consulting is designed to maintain the program in a state of readiness as well as modifying the plans as required for a changing business environment. Critical to that state of readiness, is an annual tabletop training to validate the continued effectiveness of the program.
Security Incident Response Planning
Data breaches have become all too common for organizations of all sizes and routinely make the news. The impact can be significant creating financial, brand, and data exposure risks to organizations and its customers. Legal and regulatory compliance have developed stricter requirements for data breach response and notification procedures and the protection of sensitive data. ESC has the expertise and professional experience to develop an incident response plan that addresses critical actions including preparation, identification, containment, eradication, recovery, and remediation procedures. Incident response team training and tabletop exercises provide the necessary instruction on how to prepare for and respond to a data breach through collaboration of team resources.
IT Polices and Standards Review
ESC consultants have deep security industry knowledge and will develop information security policies and standards and will conduct a thorough review of them annually. The policies and standards will also meet industry compliance requirements as well as organization information security program requirements.
