Service Continuity Process Description

• New/changed business requirements/services/process/risk assessment
• New or changed targets^D
• Breech of Major Incident recovery target
• Periodic activities^D
• CAB PIR
• Review of business and IT plans, strategies, designs
• Recognition or notification of a change of risk or impact of a business process or VBF, an IT service or component
• Continuity and Recovery plans test results
• Invocation of ITSCM following major incident

• Disaster Definition^D
• Invocation Policies^D
• BCM/ITSCM strategies
• Major Incident sub-process within Incident Management process
• Project Management capabilities^D
• Testing schedules and processes^D

• Business information^D
• IT Strategic Plan
• Financial information^D
• Business Continuity Strategy/Plans from business areas
• Service information^D
• Change information^D
• CMS^D
• Supplier IT Service Continuity Plans and test reports

Processes

• ITSCM policy adoption ^D
• ITSCM/BCM strategies review and update^D.
• BIA^D
• Risk Analysis^D
• Plans Testing

• Revised ITSCM policy and strategy
• ITSCM plans^D
• BIA developed/updated
• Risk Analysis^D and Management reviews and reports,
• Testing and testing scenarios/schedule/reports/reviews

• Planning^D
• Roles and responsibilities definition^D
• Project Management^D
• A standard risk assessment methodology^D
• Disaster Invocation^D
• Communication^D

KPIs

• Regular audits of the ITSCM Plans^D
• Agreed-to recovery targets^D
• Regular and comprehensive testing of ITSCM Plans
• Regular reviews with the business areas of BCPs
• management of ITSCM contracts with third party
• reduction in the risk and impact of possible failure of IT services

Awareness

• Preparedness of IT service staff to an invocation of the ITSCM Plans
• Targeted communication of ITSCM objectives and responsibilities