View in browser | Unsubscribe

A recent Forrester/Disaster Recovery Journal survey showed that most companies conduct business continuity tests only once a year and that does not include more extensive tests, which are run less often. When it comes to actually doing a simulation--actually carrying out all the appropriate response and recovery processes-only about one-third of organizations do that yearly. Thorough testing often finds shortcomings and parts of the plan that are missing. Read this week's articles for some helpful tips on how to improve your plan through regular testing.

This article captures thoughts, observations and industry best practices regarding plan testing. (Item #1)   At a time when businesses are under more pressure than ever to ensure continuity and minimize data loss, IT organizations have no way to accurately measure if their disaster recovery plans will actually work when they need them. (Item #2)   Catastrophic disasters do happen, and we need to be sure our plans are viable, up-to-date, pertinent to the current business structure, and fresh in the minds of our employees. (Item #3)  

Here are a variety of methods you can use to test your plan. (Item #4)   Read what experts have to say about why organizations neglect testing and exercising. (Item #5)   This document provides information on areas to consider when validating a business continuity plan and suggests some possible methodologies to use to measure the capabilities of the plan. (Item #6)  

Are you ready to test and exercise your Business Continuity or Disaster Recovery Plan? Attainium has a full complement of exercises that range from custom designed and delivered on-site to Conduct It Yourself exercises. Invest in the Test!!!

Best Regards,

Bob Mellinger
President
Attainium Corp

Quote of the Week

"Let's just say I was testing the bounds of reality.
I was curious to see what would happen.
That's all it was: curiosity."

- Jim Morrison -

Articles

1. Business Continuity Plan Testing: Considerations and Best Practices
The most important and valuable aspect of business continuity testing is the validation of documentation and processes. Process recovery procedures, manual workarounds, server build procedures, resource listings and call trees cannot be counted on until tested and proven complete and accurate in a test environment.
http://www.isaca.org/Template.cfm?Section=Publications1&CONTENTID=7888&TEMPLATE=/ContentManagement/ContentDisplay.cfm

2. Five critical recovery flaws your last DR test might have missed
This article explores the reasons why periodic disaster recovery testing and manual auditing is not enough to ensure disaster recovery readiness. It takes a closer look at the challenges of traditional disaster recovery testing and explains how and why most tests will miss the serious data protection gaps and recovery vulnerabilities that are lurking in most environments.
http://www.continuitycentral.com/feature0645.html

3. A high-return, low-impact, exercise regimen
San Diego County's Health and Human Service Agency developed a method to efficiently and effectively train managers to conduct business continuity plan functional exercises. The system they ended up creating yielded positive results and a high return on investment. It has proven to be a low cost, efficient and effective method to be ready for any disaster, and it continues to yield a high return on investment.
http://www.continuitycentral.com/feature0684.html

4. What are regulators currently looking for in business continuity plan testing?
A. complete testing program involves a wide variety of testing events and a mix of approaches. Organizations should consider the following methodologies when developing testing programs (or using third parties to assist with this process).
http://www.bankersonline.com/riskmgmt/brintech/brintech_focus121508b.html

5. Improving business continuity testing and exercising
Continuity Central asked various business continuity experts why it seems that many organizations neglect the area of testing and exercising and what individual organizations can do to improve. Each expert was asked the same three questions were asked; read the comments received in response.
http://www.continuitycentral.com/feature0596.html

6. Testing Methodologies
The effectiveness of a firm's business continuity program is critical to the success of a firm's recovery effort when faced with a business disruption. Exercising, or testing, is the most effective way to determine the validity of a plan and its capacity to meet the firm's objectives.
http://www.sifma.org/services/business_continuity/pdf/SIFMA-Testing-Methodologies.pdf