Resources

|
| Glossary
of Industry Terms
|
 |
|
You have the option to view the
complete list below or choose the
letter the term begins with.
A
| B | C
| D | E
| F | G
| H | I
| J | K
| L | M
N | O
| P | Q
| R | S
| T | U
| V | W
| X | Y | Z
|
 |
|
|
|
|
ABC FIRE EXTINGUISHER: Chemically
based devices used to eliminate
ordinary combustible, flammable
liquid, and electrical fires.
ACTIVATION: The implementation
of business continuity capabilities,
procedures, activities, and plans
in response to an emergency or disaster
declaration; the execution of the
recovery plan. Similar terms: Declaration,
Invocation.
ALERT: Notification that a potential
disaster situation exists or has
occurred; direction for recipient
to stand by for possible activation
of disaster recovery plan. A formal
notification that an incident has
occurred, which may develop into
a disaster.
ALTERNATE SITE: An alternate operating
location to be used by business
functions when the primary facilities
are inaccessible. 1) Another location,
computer center or work area designated
for recovery. 2) Location, other
than the main facility, that can
be used to conduct business functions.
3) A location, other than the normal
facility, used to process data and/or
conduct critical business functions
in the event of a disaster. Related
Terms: Cold Site, Hot Site, Interim
Site, Internal Hot site, Recovery
Site, Warm Site.
ALTERNATE WORK AREA: Office recovery
environment complete with necessary
office infrastructure (desk, telephone,
workstation, and associated hardware,
communications, etc.); also referred
to as Work Space or Alternative
work site.
APPLICATION RECOVERY: The component
of Disaster Recovery that deals
specifically with the restoration
of business system software and
data after the processing platform
has been restored or replaced. Similar
terms: Business System Recovery.
ASSEMBLY AREA: The designated area
at which employees, visitors, and
contractors assemble when evacuated
from their building/site.
ASSET: An item of property and/or
component of a business activity/process
owned by an organization. There
are three types of assets: physical
assets (e.g. buildings and equipment),
financial assets (e.g. currency,
bank deposits and shares) and non-tangible
assets (e.g. goodwill, reputation)
ASSUMPTIONS: Basic understandings
about unknown disaster situations
that the disaster recovery plan
is based on.
AUDIT: The process by which procedures
and/or documentation are measured
against pre-agreed standards.
ASSOCIATE BUSINESS CONTINUITY
INSTITUTE (ABCI): BCI Membership
for entry-level professionals who
are currently in the business continuity
or related profession.
ASSOCIATIE BUSINESS CONTINUITY
PROFESSIONAL (ABCP): DRI International,
a non-profit corporation, certifies
professionals and promotes credibility
and professionalism in the business
continuity industry. This is the
entry level of certifications and
achievable by a passing grade on
an exam and approved application.
Associated terms: Certified Business
Continuity Professional (CBCP),
Master Business Continuity Professional
(MBCP).
ASYNCHONOUS REPLICATION: Data replication
or mirror in which the application
is allowed to continue while the
data is mirrored to another site.
In this case, the application data
can represent a prior state of the
application. It is critical to use
ordered asynchronous mirroring for
real-time applications. This means
that each write is applied in the
same order at the second or backup
site as it was written in the primary
site, even if the network has re-ordered
the arrival of the data. Associated
term: synchronous replication.
ANNUAL LOSS EXPOSURE/EXPECTANCY
(ALE): A risk management method
of calculating loss based on a value
and level of frequency.
|
|
|
|
|
|
BACKLOG: a) The amount of work that
accumulates when a system or process
is unavailable for a long period
of time. This work needs to be processed
once the system or process is available
and may take a considerable amount
of time to process. b) A situation
whereby a backlog of work requires
more time to action than is available
through normal working patterns.
In extreme circumstances, the backlog
may become so marked that the backlog
cannot be cleared.
BACK OFFICE LOCATION: An office
or building, used by the organization
to conduct support activities, that
is not located within an organization's
headquarters or main location.
BACKUP (Data): A process by which
data, electronic or paper based,
is copied in some form so as to
be available and used if the original
data from which it originated is
lost, destroyed or corrupted.
BACKUP AGREEMENTS: A contract to
provide a service which includes
the method of performance, the fees,
the duration, the services provided,
and the extent of security and confidentiality
maintained.
BACKUP GENERATOR: An independent
source of power, usually fueled
by diesel or natural gas. BACKUP
POSITION LISTING : A list of alternative
personnel who can fill a recovery
team position when the primary person
is not available.
BACKUP STRATEGIES (RECOVERY STRATEGIES)
: Alternative operating method (i.e.,
platform, location, etc.) for facilities
and system operations in the event
of a disaster.
BUSINESS CONTINUITY: The ability
of an organization to ensure continuity
of service and support for its customers
and to maintain its viability before
after and during an event.
BUSINESS CONTINUITY COORDINATOR:
Designated individual responsible
for preparing and coordinating the
business continuity process. Similar
term: disaster recovery coordinator,
business recovery coordinator.
BUSINESS CONTINUITY MANAGEMENT
(BCM): A holistic management process
that identifies potential impacts
that threaten an Organization and
provides a framework for building
resilience with the capability for
an effective response that safeguards
the interests of its key stakeholders,
reputation, brand and value creating
activities. The management of recovery
or continuity in the event of a
disaster. Also the management of
the overall program through training,
rehearsals, and reviews, to ensure
the plan stays current and up to
date.
BUSINESS CONTINUITY PLAN ADMINISTRATOR:
The designated individual responsible
for plan documentation, maintenance,
and distribution.
BUSINESS CONTINUITY MANAGEMENT
PROCESS: The Business Continuity
Institute's BCM process (also known
as the BC Life Cycle) combines 6
key elements: 1) Understanding Your
Business 2) Continuity Strategies
3) Developing a BCM Response 4)
Establishing a Continuity Culture
5) Exercising, Rehearsal & Testing
6) The BCM Management Process
BUSINESS CONTINUITY MANAGEMENT
PROGRAM: An ongoing management and
governance process supported by
senior management and resourced
to ensure that the necessary steps
are taken to identify the impact
of potential losses, maintain viable
recovery strategies and plans, and
ensure continuity of products/services
through exercising, rehearsal, testing,
training, maintenance and assurance.
BUSINESS CONTINUITY MANAGEMENT
TEAM: A group of individuals functionally
responsible for directing the development
and execution of the business continuity
plan, as well as responsible for
declaring a disaster and providing
direction during the recovery process,
both pre-disaster and post-disaster.
Similar terms: disaster recovery
management team, business recovery
management team. Associated terms:
crisis management team.
BUSINESS CONTINUITY PLANNING (BCP):
Process of developing advance arrangements
and procedures that enable an organization
to respond to an event in such a
manner that critical business functions
continue with planned levels of
interruption or essential change.
SIMILAR TERMS: Contingency Planning,
Disaster Recovery Planning, Business
Resumption Planning, Continuity
Planning,
BUSINESS CONTINUITY PROGRAM: An
on-going program to ensure business
continuity and recovery requirements
are addressed, resources are allocated,
and processes and procedures are
completed and rehearsed. Most effective
with management sponsorship and
through regular rehearsals.
BUSINESS CONTINUITY STEERING COMMITTEE:
A committee of decision makers,
business owners, technology experts
and continuity professionals, tasked
with making strategic recovery and
continuity planning decisions for
the organization.
BUSINESS CONTINUITY STRATEGY:
An approach by an organization that
will ensure its recovery and continuity
in the face of a disaster or other
major outage. Plans and methodologies
are determined by the organizations
strategy. There may be more than
one solution to fulfill an organization's
strategy. Examples: Internal or
external hot-site, or cold-site,
Alternate Work Area reciprocal agreement,
Mobile Recovery, Quick Ship / Drop
Ship, Consortium-based solutions,
etc.
BUSINESS CONTINUITY TEAM: Designated
individuals responsible for developing,
execution, rehearsals, and maintenance
of the business continuity plan,
including the processes and procedures.
Similar terms: disaster recovery
team, business recovery team, and
recovery team. Associated term:
crisis response team.
BUSINESS IMPACT ANALYSIS (BIA):
A process designed to prioritize
business functions by assessing
the potential quantitative (financial)
and qualitative (non-financial)
impact that might result if an organization
was to experience a business continuity
event.
BUSINESS INTERRUPTION: Any event,
whether anticipated (i.e., public
service strike) or unanticipated
(i.e., blackout) which disrupts
the normal course of business operations
at an organization's location. Similar
terms: outage, service interruption.
Associated terms: business interruption
costs, business interruption insurance.
BUSINESS INTERRUPTION COSTS: The
impact to the business caused by
different types of outages, normally
measured by revenue lost. Associated
terms: business interruption, business
interruption insurance.
BUSINESS INTERRUPTION INSURANCE:
Insurance coverage for disaster
related expenses that may be incurred
until operations are fully recovered
after a disaster. Business interruption
insurance generally provides reimbursement
for necessary ongoing expenses during
this shutdown, plus loss of net
profits that would have been earned
during the period of interruption,
within the limits of the policy.
Associated terms: business interruption,
business interruption costs.
BUSINESS RECOVERY COORDINATOR:
An individual or group designated
to coordinate or control designated
recovery processes or testing. SIMILAR
TERMS: Disaster Recovery Coordinator
BUSINESS RECOVERY TIMELINE: The
chronological sequence of recovery
activities, or critical path, that
must be followed to resume an acceptable
level of operations following a
business interruption. This timeline
may range from minutes to weeks,
depending upon the recovery requirements
and methodology.
BUSINESS RESUMPTION PLANNING (BRP):
The operations piece of business
continuity planning. Also see: Disaster
Recovery Planning.
BUSINESS UNIT RECOVERY: The component
of Disaster Recovery which deals
specifically with the relocation
of key organization personnel in
the event of a disaster, and the
provision of essential records,
equipment supplies, work space,
communication facilities, computer
processing capability, etc. SIMILAR
TERMS : Work Group Recovery.
BUSINESS RECOVERY PROCESS : The
common critical path that all companies
follow during a recovery effort.
There are major nodes along the
path which are followed regardless
of the organization. The process
has seven stages: 1) Immediate response,
2) Environmental restoration, 3)
Functional restoration, 4) Data
synchronization, 5) Restore business
functions, 6) Interim site, and
7) Return home.
BUSINESS RECOVERY TEAM: A group
of individuals responsible for maintaining
the business recovery procedures
and coordinating the recovery of
business functions and processes.
SIMILAR TERMS: Disaster Recovery
Team
BUSINESS UNIT RECOVERY: The component
of Disaster Recovery which deals
specifically with the relocation
of a key function or department
in the event of a disaster, including
personnel, essential records, equipment
supplies, work space, communication
facilities, work station computer
processing capability, fax, copy
machines, mail services, etc. SIMILAR
TERMS: Work Group Recovery.
|
|
|
|
|
|
CALL TREE: A document that graphically
depicts the calling responsibilities
and the calling order used to contact
management, employees, customers,
vendors, and other key contacts
in the event of an emergency, disaster,
or severe outage situation.
CERTIFIED BUSINESS CONTINUITY PROFESSIONAL
(CBCP): The Disaster Recovery Institute
International (DRI International),
a not-for-profit corporation, certifies
CBCP's and promotes credibility
and professionalism in the business
continuity industry. Also offers
MBCP (Master Business Continuity
Professional) and ABCP (Associate
Business Continuity Professional).
CERTIFIED DISASTER RECOVERY PLANNER
(CDRP) : CDRP's are certified by
the Disaster Recovery Institute,
a not-for-profit corporation, which
promotes the credibility and professionalism
in the DR industry.
CHECKLIST: a) Tool to remind and
/or validate that tasks have been
completed and resources are available,
to report on the status of recovery.
b) A list of items (names or tasks
etc.) to be checked or consulted.
CHECKLIST EXERCISE: A method used
to exercise a completed disaster
recovery plan. This type of exercise
is used to determine if the information
such as phone numbers, manuals,
equipment, etc. in the plan is accurate
and current.
CHECKLIST TEST : A method used
to test a completed disaster recovery
plan. This test is used to determine
if the information such as phone
numbers, manuals, equipment, etc.
in the plan is accurate and current.
COLD SITE: An alternate facility
that already has in place the environmental
infrastructure required to recover
critical business functions or information
systems, but does not have any pre-installed
computer hardware, telecommunications
equipment, communication lines,
etc. These must be provisioned at
time of disaster. Related Terms:
Alternate Site, Hot Site, Interim
Site, Internal Hot Site, Recovery
Site, And Warm Site
COMMAND CENTER: A physical or virtual
facility located outside of the
affected area used to gather, assess,
and disseminate information and
to make decisions to effect recovery.
COMMUNICATIONS FAILURE : An unplanned
interruption in electronic communication
between a terminal and a computer
processor, or between processors,
as a result of a failure of any
of the hardware, software, or telecommunications
components comprising the link.
(Also refer to Network Outage).
COMMUNICATIONS RECOVERY: The component
of Disaster Recovery which deals
with the restoration or rerouting
of an organization's telecommunication
network, or its components, in the
event of loss. SIMILAR TERMS: Telecommunications
Recovery, Data Communications Recovery
COMPUTER RECOVERY TEAM: A group
of individuals responsible for assessing
damage to the original system, processing
data in the interim, and setting
up the new system.
CONSORTIUM AGREEMENT: An agreement
made by a group of organizations
to share processing facilities and/or
office facilities, if one member
of the group suffers a disaster.
SIMILAR TERMS: Reciprocal Agreement.
CONTACT LIST: A list of team members
and/or key players to be contacted
including their backups. The list
will include the necessary contact
information (i.e. home phone, pager,
cell, etc.) and in most cases be
considered confidential.
CONTINGENCY PLAN: A plan used by
an organization or business unit
to respond to a specific systems
failure or disruption of operations.
A contingency plan may use any number
of resources including workaround
procedures, an alternate work area,
a reciprocal agreement, or replacement
resources.
CONTINGENCY PLANNING: Process of
developing advance arrangements
and procedures that enable an organization
to respond to an event that could
occur by chance or unforeseen circumstances.
CONTINUITY OF OPERATIONS PLAN (COOP):
A COOP provides guidance on the
system restoration for emergencies,
disasters, mobilization, and for
maintaining a state of readiness
to provide the necessary level of
information processing support commensurate
with the mission requirements/priorities
identified by the respective functional
proponent. The Federal Government
and its supporting agencies traditionally
use this term to describe activities
otherwise known as Disaster Recovery,
Business Continuity, Business Resumption,
or Contingency Planning.
COOPERATIVE HOTSITES : A hot site
owned by a group of organizations
available to a group member should
a disaster strike. ALSO SEE Hot-Site.
CRATE & SHIP: A strategy for providing
alternate processing capability
in a disaster, via contractual arrangements
with an equipment supplier, to ship
replacement hardware within a specified
time period. SIMILAR TERMS: Guaranteed
Replacement, Drop Ship, Quick Ship.
CRISIS: A critical event, which,
if not handled in an appropriate
manner, may dramatically impact
an organization's profitability,
reputation, or ability to operate.
Or, an occurrence and/or perception
that threatens the operations, staff,
shareholder value, stakeholders,
brand, reputation, trust and/or
strategic/business goals of an organization.
See: Event and Incident
CRISIS MANAGEMENT: The overall
coordination of an organization's
response to a crisis, in an effective,
timely manner, with the goal of
avoiding or minimizing damage to
the organization's profitability,
reputation, or ability to operate.
CRISIS MANAGEMENT TEAM: A crisis
management team will consist of
key executives as well as key role
players (i.e. media representative,
legal counsel, facilities manager,
disaster recovery coordinator, etc.)
and the appropriate business owners
of critical organization functions
who are responsible for recovery
operations during a crisis.
CRISIS SIMULATION: The process
of testing an organization's ability
to respond to a crisis in a coordinated,
timely, and effective manner by
simulating the occurrence of a specific
crisis.
CRITICAL FUNCTIONS: Business activities
or information that could not be
interrupted or unavailable for several
business days without significantly
jeopardizing operation of the organization.
CRITICAL INFRASTRUCTURE: Systems
whose incapacity or destruction
would have a debilitating impact
on the economic security of an organization,
community, nation, etc
CRITICAL RECORDS: Records or documents
that, if damaged or destroyed, would
cause considerable inconvenience
and/or require replacement or recreation
at considerable expense.
|
|
|
|
|
DAMAGE ASSESSMENT: The process
of assessing damage, following
a disaster, to computer hardware,
vital records, office facilities,
etc. and determining what can
be salvaged or restored and what
must be replaced.
DATA BACKUPS: The back up of
system, application, program and/or
production files to media that
can be stored both on and/or offsite.
Data backups can be used to restore
corrupted or lost data or to recover
entire systems and databases in
the event of a disaster. Data
backups should be considered confidential
and should be kept secure from
physical damage and theft.
DATA BACKUP STRATEGIES: Those
actions and backup processes determined
by an organization to be necessary
to meet its data recovery and
restoration objectives. Data backup
strategies will determine the
timeframes, technologies, media
and offsite storage of the backups,
and will ensure that recovery
point and time objectives can
be met.
DATA CENTER RECOVERY: The component
of Disaster Recovery which deals
with the restoration, at an alternate
location, of data center services
and computer processing capabilities.
SIMILAR TERMS: Mainframe Recovery,
Technology Recovery.
DATA CENTER RELOCATION : The
relocation of an organization's
entire data processing operation.
DATA RECOVERY: The restoration
of computer files from backup
media to restore programs and
production data to the state that
existed at the time of the last
safe backup.
DATABASE REPLICATION: The partial
or full duplication of data from
a source database to one or more
destination databases. Replication
may use any of a number of methodologies
including mirroring or shadowing,
and may be performed synchronous,
asynchronous, or point-in-time
depending on the technologies
used, recovery point requirements,
distance and connectivity to the
source database, etc. Replication
can if performed remotely, function
as a backup for disasters and
other major outages. (Similar
Terms: File Shadowing, Disk Mirroring)
DECLARATION: A formal announcement
by pre-authorized personnel that
a disaster or severe outage is
predicted or has occurred and
that triggers pre-arranged mitigating
actions (e.g., a move to an alternate
site.) Similar terms: Invocation.
DECLARATION FEE: A one-time fee,
charged by an Alternate Facility
provider, to a customer who declares
a disaster. NOTE: Some recovery
vendors apply the declaration
fee against the first few days
of recovery. 1) An initial fee
or charge for implementing the
terms of a recovery agreement
or contract. SIMILAR TERMS: Notification
Fee.
DEDICATED LINE : A pre-established
point to point communication link
between computer terminals and
a computer processor, or between
distributed processors, that does
not require dial-up access.
DEPARTMENTAL RECOVERY TEAM :
A group of individuals responsible
for performing recovery procedures
specific to their department.
DEPENDENCY: The reliance, directly
or indirectly, of one activity
or process upon another. See:
Mission Critical Activity
DESK CHECK: One method of testing
a specific component of a plan.
Typically, the owner or author
of the component reviews it for
accuracy and completeness and
signs off.
DESKTOP EXERCISE: See: Table
Top Exercise.
DIAL BACKUP : The use of dial-up
communication lines as a backup
to dedicated lines.
DIAL-UP LINE : A communication
link between computer terminals
and a computer processor, which
is established on demand by dialing
a specific telephone number.
DISASTER: A sudden, unplanned
calamitous event causing great
damage or loss as defined or determined
by a risk assessment and BIA;
1) Any event that creates an inability
on an organizations part to provide
critical business functions for
some predetermined period of time.
2) In the business environment,
any event that creates an inability
on an organization's part to provide
the critical business functions
for some predetermined period
of time. 3) The period when company
management decides to divert from
normal production responses and
exercises its disaster recovery
plan. Typically signifies the
beginning of a move from a primary
to an alternate location. SIMILAR
TERMS: Business Interruption;
Outage; Catastrophe
DISASTER PREVENTION : Measures
employed to prevent, detect, or
contain incidents which, if unchecked,
could result in disaster.
DISASTER RECOVERY: Activities
and programs designed to return
the entity to an acceptable condition.
The ability to respond to an interruption
in services by implementing a
disaster recovery plan to restore
an organization's critical business
functions.
DISASTER RECOVERY ADMINISTRATOR
: The individual responsible for
documenting recovery activities
and tracking recovery progress.
DISASTER RECOVERY OR BUSINESS
CONTINUITY COORDINATOR: A role
of the BCM program that coordinates
planning and implementation for
overall recovery of an organization
or unit(s). SIMILAR ROLES: Business
Recovery Coordinator, Business
Recovery Planner, Disaster Recovery
Planner, and Disaster Recovery
Administrator
DISASTER RECOVERY INSTITUTE INTERNATIONAL
(DRI INTERNATIONAL): A not-for-profit
organization that offers certification
and educational offerings for
business continuity professionals.
DISASTER RECOVERY PERIOD : The
time period between a disaster
and a return to normal functions,
during which the disaster recovery
plan is employed.
DISASTER RECOVERY PLAN: The management-approved
document that defines the resources,
actions, tasks and data required
to manage the recovery effort.
Usually refers to the technology
recovery effort. This is a component
of the BCM Program. See: BCM Plan,
Recovery Plan.
DISASTER RECOVERY PLANNING: The
technological aspect of business
continuity planning. The advance
planning and preparation that
is necessary to minimize loss
and ensure continuity of the critical
business functions of an organization
in the event of disaster. SIMILAR
TERMS: Contingency Planning; Business
Resumption Planning; Corporate
Contingency Planning; Business
Interruption Planning; Disaster
Preparedness.
DISASTER RECOVERY SOFTWARE:
An application program developed
to assist an organization in writing
a comprehensive disaster recovery
plan.
DISASTER RECOVERY TEAMS (Business
Recovery Teams): A structured
group of teams ready to take control
of the recovery operations if
a disaster should occur.
DISK MIRRORING: Disk mirroring
is the duplication of data on
separate disks in real time to
ensure its continuous availability,
currency and accuracy. Disk mirroring
can function as a disaster recovery
solution by performing the mirroring
remotely. True mirroring will
enable a zero recovery point objective.
Depending on the technologies
used, mirroring can be performed
synchronously, asynchronously,
semi-synchronously, or point-in-time.
Similar terms: data mirroring,
data replication, file shadowing,
and journaling
DISTRIBUTED PROCESSING : Use
of computers at various locations,
typically interconnected via communication
links for the purpose of data
access and/or transfer. DOWNLOADING:
Connecting to another computer
and copying a program or file
from that system.
DROP SHIP: A strategy for a)
Delivering equipment, supplies,
and materials at the time of a
business continuity event or exercise.
b) Providing replacement hardware
within a specified time period
via prearranged contractual arrangements
with an equipment supplier at
the time of a business continuity
event. Similar term: quick ship.
|
|
|
|
|
|
ELECTRONIC VAULTING: Electronically
forwarding backup data to an offsite
server or storage facility. Vaulting
eliminates the need for tape shipment
and therefore significantly shortens
the time required to move the data
offsite. Similar terms: vaulting,
electronic backup. Associated terms:
electronic journaling.
EMERGENCY: An unexpected or impending
situation that may cause injury,
loss of life, destruction of property,
or cause the interference, loss,
or disruption of an organization's
normal business operations to such
an extent that it poses a threat.
EMERGENCY COORDINATOR: The person
assigned the role of coordinating
the activities of the evacuation
of a site and/or building with the
statutory and/or emergency services.
EMERGENCY OPERATIONS CENTER (EOC):
A site from which response teams/officials
(municipal, county, state and federal)
exercise direction and control in
an emergency or disaster. Associated
term: command center.
EMERGENCY PREPAREDNESS: The discipline
that ensures an organization or
community's readiness to respond
to an emergency in a coordinated,
timely, and effective manner to
prevent the loss of life and minimize
injury and property damage.
EMERGENCY PROCEDURES: A plan of
action to commence immediately to
prevent the loss of life and minimize
injury and property damage.
EMERGENCY RESPONSE PROCEDURES:
The initial response to any event
and is focused upon protecting human
life and the organization's assets.
EMERGENCY RESPONSE TEAM (ERT):
Teams of individuals who have been
trained to provide rapid response
to all type of emergencies and to
provide assistance and act as a
contact to responding outside agencies.
Associated term: medical emergency
response team (MERT).
EMPLOYEE RELIEF CENTER (ERC) :
A predetermined location for employees
and their families to obtain food,
supplies, financial assistance,
etc., in the event of a catastrophic
disaster.
ENVIRONMENT RESTORATION: Recreation
of the critical business operations
in an alternate location, including
people, equipment and communications
capability.
ESCALATION: The process by which
event related information is communicated
upwards through an organization's
Business Continuity and/or risk
management reporting process.
ESSENTIAL SERVICE: A service without
which a building would be 'disabled'.
Often applied to the utilities (water,
gas, electricity, etc.) it may also
include standby power systems, environmental
control systems or communication
networks.
EVACUATION: The movement of employees,
visitors and contractors from a
site and/or building to a safe place
(assembly area) in a controlled
and monitored manner at time of
an event.
EVENT: Any occurrence that may
lead to a business continuity incident.
See: Crisis and Incident
EXECUTIVE / MANAGEMENT SUCCESSION:
A predetermined plan for ensuring
the continuity of authority, decision-making,
and communication in the event that
key members of senior management
suddenly become incapacitated, or
in the event that a crisis occurs
while key members of senior management
are unavailable.
EXERCISE: A people focused activity
designed to execute business continuity
plans and evaluate the individual
and/or organization performance
against approved standards or objectives.
Exercises can be announced or unannounced,
and are performed for the purpose
of training and conditioning team
members, and validating the business
continuity plan. Exercise results
identify plan gaps and limitations
and are used to improve and revise
the Business Continuity Plans.Types
of exercises include: Table Top
Exercise, Simulation Exercise, Operational
Exercise, Mock Disaster, Desktop
Exercise, Full Rehearsal.
EXERCISE AUDITOR: An appointed
role that is assigned to assess
whether the exercise aims / objectives
are being met and to measure whether
activities are occurring at the
right time and involve the correct
people to facilitate their achievement.
The exercise auditor is not responsible
for the mechanics of the exercise.
This independent role is crucial
in the subsequent debriefing.
EXERCISE CONTROLLER: See Exercise
Owner
EXERCISE COORDINATOR: They are
responsible for the mechanics of
running the exercise. The Coordinator
must lead the exercise and keep
it focused within the predefined
scope and objectives of the exercise
as well as on the disaster scenario.
The Coordinator must be objective
and not influence the outcome. They
perform the coordination to make
sure appropriate exercise participants
have been identified and that exercise
scripts have been prepared before,
utilized during, and updated after
the exercise. Similar terms: Exercise
Facilitator, Exercise Director.
EXERCISE OBSERVER: An exercise
observer has no active role within
the exercise but is present for
awareness and training purposes.
An exercise observer might make
recommendations for procedural improvements.
EXERCISE OWNER: An appointed role
that has total management oversight
and control of the exercise and
has the authority to alter the exercise
plan. This includes early termination
of the exercise for reasons of safety
or the aims / objectives of the
exercise cannot be met due to an
unforeseen or other internal or
external influence.
EXERCISE PLAN: A plan designed
to periodically evaluate tasks,
teams, and procedures that are documented
in business continuity plans to
ensure the plan's viability. This
can include all or part of the BC
plan, but should include mission
critical components. EXPOSURE: The
potential susceptibility to loss;
the vulnerability to a particular
risk.
EXTENDED OUTAGE : A lengthy, unplanned
interruption in system availability
due to computer hardware or software
problems, or communication failures.
EXTRA EXPENSE: The extra cost necessary
to implement a recovery strategy
and/or mitigate a loss. An example
is the cost to transfer inventory
to an alternate location to protect
it from further damage, cost of
reconfiguring lines, overtime costs,
etc. Typically reviewed during BIA
and is a consideration during insurance
evaluation.
|
|
|
|
|
|
FACILITIES: A location containing
the equipment, supplies, voice and
data communication lines, to conduct
transactions required to conduct
business under normal conditions.
SIMILAR TERMS: Primary Site, Primary
Processing Facility, Primary Office
Facility.
FELLOW BUSINESS CONTINUITY INSTITUTE
(FBCI): Membership accreditation
from the Business Continuity Institute
for a senior, professional working
practitioner with five years of
full-time employment who currently
works in the business continuity
related profession and a member
of the BCI for two years.
FILE BACKUP : The practice of dumping
(copying) a file stored on disk
or tape to another disk or tape.
This is done for protection case
the active file gets damaged.
FILE RECOVERY : The restoration
of computer files using backup copies.
FILE SERVER : The central repository
of shared files and applications
in a computer network (LAN).
FILE SHADOWING: The asynchronous
duplication of the production database
on separate media to ensure data
availability, currency and accuracy.
File shadowing can be used as a
disaster recovery solution if performed
remotely, to improve both the recovery
time and recovery point objectives.
SIMILAR TERMS: Data Replication,
Journaling, Disk Mirroring.
FLOOR WARDEN: Person responsible
for ensuring that all employees,
visitors and contractors evacuate
a floor within a specific site.
The Floor Warden reports to the
Fire Marshall when the designated
floor is clear. SIMILAR TERM: Fire
Marshal
FORWARD RECOVERY: The process of
recovering a database to the point
of failure by applying active journal
or log data to the current backup
files of the database.
FULL RECOVERY TEST : An exercise
in which all recovery procedures
and strategies are tested (as opposed
to a Partial Recovery Test).
FULL REHEARSAL: An exercise that
simulates a Business Continuity
event where the organization or
some of its component parts are
suspended until the exercise is
completed. See: Exercise
|
|
|
|
|
|
GAP ANALYSIS: A survey whose aim
is to identify the differences between
BCM/Crisis Management requirements
(what the business says it needs
at time of an event and what is
in place and/or available.
GENERATOR: An independent source
of power usually fueled by diesel
or natural gas.
|
|
|
|
|
|
HALON: A gas used to extinguish
fires effective only in closed areas.
HAZARD OR THREAT IDENTIFICATION:
The process of identifying situations
or conditions that has the potential
to cause injury to people, damage
to property, or damage to the environment.
HEALTH AND SAFETY: The process
by which the well being of all employees,
contractors, visitors and the public
is safeguarded. All business continuity
plans and planning must be cognizant
of H&S statutory and regulatory
requirements and legislation. Health
and Safety considerations should
be reviewed during the Risk assessment.
HIGH AVAILABILITY: Systems or applications
requiring a very high level of reliability
and availability. High availability
systems typically operate 24x7 and
usually require built-in redundancy
to minimize the risk of downtime
due to hardware and/or telecommunication
failures.
HIGH PRIORITY TASKS : Activities
vital to the operation of the organization.
Currently being phased out due to
environmental concerns. SIMILAR
TERMS: Critical Functions.
HIGH-RISK AREAS: Areas identified
during the risk assessment that
are highly susceptible to a disaster
situation or might be the cause
of a significant disaster.
HOTSITE: An alternate facility
that already has in place the computer,
telecommunications, and environmental
infrastructure required to recover
critical business functions or information
systems. Related Terms: Alternate
Site, Cold Site, And Warm Site
HUMAN THREATS: Possible disruptions
in operations resulting from human
actions. (i.e., disgruntled employee,
terrorism, blackmail, job actions,
riots, etc.)
|
|
|
|
|
|
IMPACT: The effect, acceptable or
unacceptable, of an event on an
organization. The types of business
impact are usually described as
financial and non-financial and
are further divided into specific
types of impact. See: Business Impact
Analysis INCIDENT: An event which
is not part of a standard operating
business, which may impact or interrupt
services, and in some cases, may
lead to disaster. See: Crisis and
Event
INCIDENT COMMAND SYSTEM (ICS):
Combination of facilities, equipment,
personnel, procedures, and communications
operating within a common organizational
structure with responsibility for
management of assigned resources
to effectively direct and control
the response to an incident. Intended
to expand, as situation requires
larger resources, without requiring
new, reorganized command structure.
(FEMA Term)
INCIDENT MANAGEMENT: The process
by which an organization responds
to and controls an incident using
Emergency Response Procedures. See:
Emergency Response Procedures
INCIDENT MANAGER: Commands the
local EOC reporting up to senior
management on the recovery progress.
Has the authority to invoke the
local recovery plan.
INCIDENT RESPONSE: The response
of an organization to a disaster
or other significant event that
may significantly impact the organization,
its people, or its ability to function
productively. An incident response
may include evacuation of a facility,
initiating a disaster recovery plan,
performing damage assessment, and
any other measures necessary to
bring an organization to a more
stable status.
INFORMATION SECURITY: The securing
or safeguarding of all sensitive
information, electronic or otherwise,
which is owned by an organization.
See: BS 7799 and ISO 17799
INFRASTRUCTURE: The underlying
foundation, basic framework, or
interconnecting structural elements
that support an organization.
INTEGRATED EXERCISE: An exercise
conducted on multiple interrelated
components of a Business Continuity
Plan, typically under simulated
operating conditions. Examples of
interrelated components may include
interdependent departments or interfaced
systems.
INTEGRATED TEST: See integrated
exercise
INTERAGENCY CONTINGENCY PLANNING
REGULATION : A regulation written
and imposed by the Federal Financial
Institutions Examination Council
concerning the need for financial
institutions to maintain a working
disaster recovery plan.
INTERIM ORGANIZATIONAL STRUCTURE
: An alternate organization structure
that will be used during recovery
from a disaster. This temporary
structure will typically streamline
chains of command and increase decision-making
autonomy.
INTERIM SITE: A temporary location
used to continue performing business
functions after vacating a recovery
site and before the original or
new home site can be occupied. Move
to an interim site may be necessary
if ongoing stay at the recovery
site is not feasible for the period
of time needed or if the recovery
site is located far from the normal
business site that was impacted
by the disaster. An interim site
move is planned and scheduled in
advance to minimize disruption of
business processes; equal care must
be given to transferring critical
functions from the interim site
back to the normal business site.
See Alternate Site, Cold Site, Hot
site, Internal Hot Site, Recovery
Site, Warm site
INTERNAL HOTSITE: A fully equipped
alternate processing site owned
and operated by the organization.
INTERRUPTION: An outage caused
by the failure of one or more communications
links with entities outside of the
local facility.
INVOCATION: The act by which a
Business Continuity Management or
Crisis Management process is formally
started. The term is often used
to refer to the act of using a service
such as work area recovery as offered
by a commercial or third party provider.
See: Activation and Declaration
|
|
|
|
|
JOURNALING: The process of logging
changes or updates to a database since
the last full backup. Journals can
be used to recover previous versions
of a file before updates were made,
or to facilitate disaster recovery,
if performed remotely, by applying
changes to the last safe backup. SIMILAR
TERMS: File Shadowing, Data Replication,
Disk Mirroring
|
|
|
|
|
KEY TASKS: Priority procedures and
actions in a Business Continuity Plan
that must be executed within the first
few minutes/hours of the plan invocation.
|
|
|
|
|
|
LAN (LOCAL AREA NETWORK): Computing
equipment, in close proximity to
each other, connected to a server
which houses software that can be
access by the users. This method
does not utilize a public carrier.
LAN RECOVERY : The component of
Disaster Recovery which deals specifically
with the replacement of LAN equipment
in the event of a disaster, and
the restoration of essential data
and software SIMILAR TERMS: Client/Server
Recovery.
LEAD TIME: The time it takes for
a supplier to make equipment, services,
or supplies available after receiving
an order. Business continuity plans
should try to minimize lead time
by creating service level agreements
(SLA) with suppliers or alternate
suppliers in advance of a Business
Continuity event rather than relying
on the suppliers' best efforts.
See: Service Level Agreement.
LEASED LINE : Usually synonymous
with dedicated line.
LINE REROUTING : A service offered
by many regional telephone companies
allowing the computer center to
quickly reroute the network of dedicated
lines to a backup site.
LINE VOLTAGE REGULATORS : Also
known as surge protectors. These
protectors/regulators distribute
electricity evenly.
LOGISTICS/TRANSPORTATION TEAM:
A team comprised of various members
representing departments associated
with supply acquisition and material
transportation, responsible for
ensuring the most effective acquisition
and mobilization of hardware, supplies,
and support materials. This team
is also responsible for transporting
and supporting staff.
LOSS: Unrecoverable resources that
are redirected or removed as a result
of a Business Continuity event.
Such losses may be loss of life,
revenue, market share, competitive
stature, public image, facilities,
or operational capability.
LOSS ADJUSTER: Designated position
activated at the time of a Business
Continuity event to assist in managing
the financial implications of the
event and should be involved as
part of the management team where
possible
LOSS REDUCTION: The technique
of instituting mechanisms to lessen
the exposure to a particular risk.
Loss reduction involves planning
for, and reacting to, an event to
limit its impact. Examples of loss
reduction include sprinkler systems,
insurance policies, and evacuation
procedures.
LOST TRANSACTION RECOVERY: Recovery
of data (paper within the work area
and/or system entries) destroyed
or lost at the time of the disaster
or interruption. Paper documents
may need to be requested or re-acquired
from original sources. Data for
system entries may need to be recreated
or reentered
|
|
|
|
|
|
MAINFRAME COMPUTER : A high-end
computer processor, with related
peripheral devices, capable of supporting
large volumes of batch processing,
high performance on-line transaction
processing systems, and extensive
data storage and retrieval. SIMILAR
TERMS: Host Computer.
MANUAL PROCEDURES: An alternative
method of working following a loss
of IT systems. As working practices
rely more and more on computerized
activities, the ability of an organization
to fallback to manual alternatives
lessens. However, temporary measures
and methods of working can help
mitigate the impact of a business
continuity event and give staff
a feeling of doing something.
MEDIA TRANSPORTATION COVERAGE :
An insurance policy designed to
cover transportation of items to
and from an EDP center, the cost
of reconstruction and the tracing
of lost items. Coverage is usually
extended to transportation and dishonesty
or collusion by delivery employees.
MICR EQUIPMENT (Magnetic Ink Character
Reader) : Equipment used to imprint
machine readable code. Generally,
financial institutions use this
equipment to prepare paper data
for processing, encoding (imprinting)
items such as routing and transit
numbers, account numbers and dollar
amounts.
MISSION-CRITICAL APPLICATION: An
application that is essential to
the organization's ability to perform
necessary business functions. Loss
of the mission-critical application
would have a negative impact on
the business, as well as legal or
regulatory impacts.
MOBILE HOT SITE : A large trailer
containing backup equipment and
peripheral devices delivered to
the scene of the disaster. It is
then hooked up to existing communication
lines.
MOBILE RECOVERY: A mobilized resource
purchased or contracted for the
purpose of business recovery. The
mobile recovery center might include:
computers, workstations, telephone,
electrical power, etc.
MOCK DISASTER: One method of exercising
teams in which participants are
challenged to determine the actions
they would take in the event of
a specific disaster scenario. Mock
disasters usually involve all, or
most, of the applicable teams. Under
the guidance of exercise coordinators,
the teams walk through the actions
they would take per their plans,
or simulate performance of these
actions. Teams may be at a single
exercise location, or at multiple
locations, with communication between
teams simulating actual 'disaster
mode' communications. A mock disaster
will typically operate on a compressed
timeframe representing many hours,
or even days.
MODEM (Modulator Demodulator Unit)
: Device that converts data from
analog to digital and back again.
|
|
|

|
N
- Z
|
|
|
|
| |
N + 1: A fault tolerant strategy
that includes multiple systems
or components protected by one
backup system or component. (Many-to-one
relationship)
NATURAL THREATS : Events caused
by nature causing disruptions
to an organization.
NETWORK ARCHITECTURE : The basic
layout of a computer and its attached
systems, such as terminals and
the paths between them.
NETWORK OUTAGE: An interruption
of voice, data, or IP network
communications.
NODE: The name used to designate
a part of a network. This may
be used to describe one of the
links in the network, or a type
of link in the network (for example,
Host Node or Intercept Node).
NONESSENTIAL FUNCTION/DATA :
Business activities or information
which could be interrupted or
unavailable indefinitely without
significantly jeopardizing critical
functions of an organization.
NONESSENTIAL RECORDS : Records
or documents which, if irretrievably
lost or damaged, will not materially
impair the organization's ability
to conduct business.
|
|
|
|
| |
OFF-HOST PROCESSING: A backup
mode of operation in which processing
can continue throughout a network
despite loss of communication
with the mainframe computer.
OFF-LINE PROCESSING
: A backup mode of operation
in which processing can continue
manually or in batch mode if
the on-line systems are unavailable.
OFF-SITE STORAGE:
Any place physically located
a significant distance away
from the primary site, where
duplicated and vital records
(hard copy or electronic and/or
equipment) may be stored for
use during recovery.
ON-LINE SYSTEMS
: An interactive computer system
supporting users over a network
of computer terminals.
OPERATING SOFTWARE
: A type of system software
supervising and directing all
of the other software components
plus the computer hardware
OPERATIONAL EXERCISE:
See: Exercise
OPERATIONAL RISK:
The risk of loss resulting from
inadequate or failed procedures
and controls. This includes
loss from events related to
technology and infrastructure,
failure, business interruptions,
staff related problems, and
from external events such as
regulatory changes
ORGANIZATION CHART
: A diagram representative of
the hierarchy of an organization's
personnel.
ORGANIZATION-WIDE:
A policy or function applicable
to the entire organization and
not just one single department.
OUTAGE: The interruption
of automated processing systems,
infrastructure, support services,
or essential business operations,
which may result, in the organizations
inability to provide services
for some period of time.
OUTSOURCING: The
transfer of data processing
functions to an independent
third party.
|
|
|
|
| |
PARALLEL TEST : A test of recovery
procedures in which the objective
is to parallel an actual business
cycle.
PEER REVIEW: One method of testing
a specific component of a plan.
Typically, personnel (other than
the owner or author) with appropriate
technical or business knowledge
review the component for accuracy
and completeness.
PERIPHERAL EQUIPMENT : Devices
connected to a computer processor
which perform such auxiliary functions
as communications, data storage,
printing, etc.
PHYSICAL SAFEGUARDS : Physical
measures taken to prevent a disaster,
such as fire suppression systems,
alarm systems, power backup and
conditioning systems, access control
systems, etc.
PLAN ADMINISTRATOR: The individual
responsible for documenting recovery
activities and tracking recovery
progress.
PLAN MAINTENANCE: The management
process of keeping an organization's
Business continuity management
plans up to date and effective.
Maintenance procedures are a part
of this process for the review
and update of the BC plans on
a defined schedule. Maintenance
procedures are a part of this
process.
PLATFORM: A hardware or software
architecture of a particular model
or family of computers (i.e.,
IBM, Tandem, HP, etc).
PORTABLE SHELL : An environmentally
protected and readied structure
that can be transported to a disaster
site so equipment can be obtained
and installed near the original
location.
PREVENTATIVE MEASURES: Controls
aimed at deterring or Mitigating
undesirable events form taking
place.
PRIORITIZATION: The ordering
of critical activities and their
dependencies are established during
the BIA and Strategic-planning
phase. The business continuity
plans will be implemented in the
order necessary at the time of
the event.
PROCEDURAL SAFEGUARDS : Procedural
measures taken to prevent a disaster,
such as safety inspections, fire
drills, security awareness programs,
records retention programs, etc.
|
|
|
|
| |
QUALITATIVE ASSESSMENT: The process
for evaluating a business function
based on observations and does
not involve measures or numbers.
Instead, it uses descriptive categories
such as customer service, regulatory
requirements, etc to allow for
refinement of the quantitative
assessment. This is normally done
during the BIA phase of planning.
QUANTITATIVE ASSESSMENT: The
process for placing value on a
business function for risk purposes.
It is a systematic method that
evaluates possible financial impact
for losing the ability to perform
a business function. It uses numeric
values to allow for prioritizations.
This is normally done during the
BIA phase of planning.
QUICK SHIP: See Drop Ship.
|
|
|
|
| |
RECIPROCAL AGREEMENT: Agreement
between two organizations (or
two internal business groups)
with similar equipment/environment
that allows each one to recover
at the other's location.
RECORD RETENTION : Storing historical
documentation for a set period
of time, usually mandated by state
and federal law or the Internal
Revenue Service.
RECOVERABLE LOSS: Financial losses
due to an event that may be reclaimed
in the future, e.g. through insurance
or litigation. This is normally
identified in the Risk Assessment
or BIA.
RECOVERY: Implementing the prioritized
actions required to return the
processes and support functions
to operational stability following
an interruption or disaster.
RECOVERY ACTION PLAN : The comprehensive
set of documented tasks to be
carried out during recovery operations.
RECOVERY ALTERNATIVE : The method
selected to recover the critical
business functions following a
disaster. In data processing,
some possible alternatives would
be manual processing, use of service
bureaus, or a backup site (hot
or cold-site). A recovery alternative
is usually selected following
either a Risk Analysis, Business
Impact Analysis, or both. SIMILAR
TERMS : Backup site, backup alternative.
RECOVERY CAPABILITY : This defines
all of the components necessary
to perform recovery. These components
can include a plan, an alternate
site, change control process,
network rerouting and others.
RECOVERY MANAGEMENT TEAM : A
group of individuals responsible
for directing the development
and on-going maintenance of a
disaster recovery plan. Also responsible
for declaring a disaster and providing
direction during the recovery
process.
RECOVERY PERIOD: The time period
between a disaster and a return
to normal functions, during which
the disaster recovery plan is
employed.
RECOVERY PLANNING TEAM : A group
of individuals appointed to oversee
the development and implementation
of a disaster recovery plan.
RECOVERY POINT OBJECTIVE (RPO):
From a business perspective RPO
is the maximum amount of data
loss the business can incur in
an event. The targeted point in
time to which systems and data
must be recovered after an outage
as determined by the business
unit.
RECOVERY SERVICES AGREEMENT
\ CONTRACT: A contract with an
external organization guaranteeing
the provision of specified equipment,
facilities, or services, usually
within a specified time period,
in the event of a business interruption.
A typical contract will specify
a monthly subscription fee, a
declaration fee, usage costs,
method of performance, amount
of test time, termination options,
penalties and liabilities, etc.
RECOVERY SITE: A designated site
for the recovery of business unit,
technology, or other operations,
which are critical to the enterprise.
Related Terms: Alternate Site,
Cold Site, Hot Site, Interim Site,
Internal Hot Site, And Warm Site
RECOVERY STRATEGY: See business
continuity strategy RECOVERY TEAM:
See: Business Continuity Team
RECOVERY TIME OBJECTIVE (RTO):
The period of time within which
systems, applications, or functions
must be recovered after an outage
(e.g. one business day). RTO's
are often used as the basis for
the development of recovery strategies,
and as a determinant as to whether
or not to implement the recovery
strategies during a disaster situation.
Similar Terms: Maximum Allowable
Downtime
RECOVERY TIMELINE: The sequence
of recovery activities, or critical
path, which must be followed to
resume an acceptable level of
operation following a business
interruption. The timeline may
range from minutes to weeks, depending
upon the recovery requirements
and methodology.
RESILIENCE: The ability of an
organization to absorb the impact
of a business interruption, and
continue to provide a minimum
acceptable level of service.
RESPONSE: The reaction to an
incident or emergency to assess
the damage or impact and to ascertain
the level of containment and control
activity required. In addition
to addressing matters of life
safety and evacuation, Response
also addresses the policies, procedures
and actions to be followed in
the event of an emergency. . SIMILAR
TERMS: Emergency Response, Disaster
Response, Immediate Response,
and Damage Assessment.
RESTORATION: Process of planning
for and/or implementing procedures
for the repair of hardware, relocation
of the primary site and its contents,
and returning to normal operations
at the permanent operational location.
RESUMPTION: The process of planning
for and/or implementing the restarting
of defined business processes
and operations following a disaster.
This process commonly addresses
the most critical business functions
within BIA specified timeframes.
RISK: Potential for exposure to
loss. Risks, either man-made or
natural, are constant. The potential
is usually measured by its probability
in years.
RISK ASSESSMENT / ANALYSIS: Process
of identifying the risks to an
organization, assessing the critical
functions necessary for an organization
to continue business operations,
defining the controls in place
to reduce organization exposure
and evaluating the cost for such
controls. Risk analysis often
involves an evaluation of the
probabilities of a particular
event.
RISK CATEGORIES: Risks of similar
types are grouped together under
key headings, otherwise known
as 'risk categories'. These categories
include reputation, strategy,
financial, investments, operational
infrastructure, business, regulatory
compliance, Outsourcing, people,
technology and knowledge.
RISK MANAGEMENT : The discipline
which ensures that an organization
does not assume an unacceptable
level of risk.
RISK MITIGATION: Implementation
of measures to deter specific
threats to the continuity of business
operations, and/or respond to
any occurrence of such threats
in a timely and appropriate manner.
|
|
|
|
| |
SALVAGE & RESTORATION: The act
of performing a coordinated assessment
to determine the appropriate actions
to be performed on impacted assets.
The assessment can be coordinated
with Insurance adjusters, facilities
personnel, or other involved parties.
Appropriate actions may include:
disposal, replacement, reclamation,
refurbishment, recovery or receiving
compensation for unrecoverable
organizational assets.
SALVAGE PROCEDURES : Specified
procedures to be activated if
equipment or a facility should
suffer any destruction.
SAMPLE PLAN : A generic disaster
recovery plan that can be tailored
to fit a particular organization.
SATELLITE COMMUNICATION : Data
communications via satellite.
For geographically dispersed organizations,
may be viable alternative to ground-based
communications in the event of
a disaster.
SCENARIO: A pre-defined set
of Business Continuity events
and conditions that describe,
for planning purposes, an interruption,
disruption, or loss related to
some aspect(s) of an organization's
business operations to support
conducting a BIA, developing a
continuity strategy, and developing
continuity and exercise plans.
Note: Scenarios are neither predictions
nor forecasts.
SCOPE: Predefined areas of operation
for which a disaster recovery
plan is developed.
SECURITY REVIEW: A periodic review
of policies, procedures, and operational
practices maintained by an organization
to ensure that they are followed
and effective.
SELF INSURANCE: The pre-planned
assumption of risk in which a
decision is made to bear loses
that could result from a Business
Continuity event rather than purchasing
insurance to cover those potential
losses.
SERVICE LEVEL AGREEMENT (SLA):
A formal agreement between a service
provider (whether internal or
external) and their client (whether
internal or external), which covers
the nature, quality, availability,
scope and response of the service
provider. The SLA should cover
day-to-day situations and disaster
situations, as the need for the
service may vary in a disaster.
SERVICE LEVEL MANAGEMENT (SLM):
The process of defining, agreeing,
documenting and managing the levels
of any type of services provided
by service providers whether internal
or external that are required
and cost justified.
SHADOW FILE PROCESSING : An approach
to data backup in which real-time
duplicates of critical files are
maintained at a remote processing
site. SIMILAR TERMS: Remote Mirroring.
SIMULATION EXERCISE: One method
of exercising teams in which participants
perform some or all of the actions
they would take in the event of
plan activation. Simulation exercises,
which may involve one or more
teams, are performed under conditions
that at least partially simulate
'disaster mode'. They may or may
not be performed at the designated
alternate location, and typically
use only a partial recovery configuration.
SIMULATION TEST: A test of recovery
procedures under conditions approximating
a specific disaster scenario.
This may involve designated units
of the organization actually ceasing
normal operations while exercising
their procedures.
SINGLE POINT OF FAILURE: (SPOF)
A unique pathway or source of
a service, activity, and/or process.
Typically, there is no alternative
and a loss of that element could
lead to a failure of a critical
function.
SKILLS INVENTORY : A listing
of employees which lists their
skills that apply to recovery.
STAND-ALONE PROCESSING : Processing,
typically on a PC or mid-range
computer, which does not require
any communication link with a
mainframe or other processor.
STAND DOWN: Formal notification
that the response to a Business
Continuity event is no longer
required or has been concluded.
STANDALONE TEST: A test conducted
on a specific component of a plan,
in isolation from other components,
typically under simulated operating
conditions.
STRUCTURED WALKTHROUGH: Types
of exercise in which team members
physically implement the business
continuity plans and verbally
review each step to assess its
effectiveness, identify enhancements,
constraints and deficiencies.
See: Exercise.
SUBSCRIPTION: See: Recovery Services
Agreement \ Contract
SUPPLY CHAIN: All suppliers,
manufacturing facilities, distribution
centers, warehouses, customers,
raw materials, work-in-process
inventory, finished goods, and
all related information and resources
involved in meeting customer and
organizational requirements.
SYSTEM: Set of related technology
components that work together
to support a business process
or provide a service.
SYSTEM OUTAGE : An unplanned
interruption in system availability
as a result of computer hardware
or software problems, or operational
problems.
SYSTEM RECOVERY: The procedures
for rebuilding a computer system
and network to the condition where
it is ready to accept data and
applications, and facilitate network
communications.
SYSTEM RESTORE: The procedures
necessary to return a system to
an operable state using all available
data including data captured by
alternate means during the outage.
System restore depends upon having
a live, recovered system available.
|
|
|
|
| |
TABLE TOP EXERCISE: One method
of exercising teams in which participants
review and discuss the actions
they would take per their plans,
but do not perform any of these
actions. The exercise can be conducted
with a single team, or multiple
teams, typically under the guidance
of exercise facilitators.
TASK LIST: Defined mandatory
and discretionary tasks allocated
to teams and/or individual roles
within a Business Continuity Plan
TECHNICAL THREATS : A disaster
causing event that may occur regardless
of any human elements.
TEMPORARY OPERATING PROCEDURES
: Predetermined procedures which
streamline operations while maintaining
an acceptable level of control
and auditability during a disaster
situation.
TEST: A pass/fail evaluation
of infrastructure (example-computers,
cabling, devices, hardware) and\or
physical plant infrastructure
(example-building systems, generators,
utilities) to demonstrate the
anticipated operation of the components
and system. Tests are often performed
as part of normal operations and
maintenance. Tests are often included
within exercises. (See Exercise).
TEST PLAN: See Exercise Plan
THREAT: A combination of the
risk, the consequence of that
risk, and the likelihood that
the negative event will take place.
Associated term: risk. Example
Threats: Natural, Man-made, Technological,
and Political disasters.)
TRAUMA COUNSELING: The provisioning
of counseling assistance by trained
individuals to employees, customers
and others who have suffered mental
or physical injury as the result
of an event.
TRAUMA MANAGEMENT: The process
of helping employees deal with
trauma in a systematic way following
an event by proving trained counselors,
support systems, and coping strategies
with the objective of restoring
employees psychological well being.
|
|
|
|
| |
UNEXPECTED LOSS: The worst-case
financial loss or impact that
a business could incur due to
a particular loss event or risk.
The unexpected loss is calculated
as the expected loss plus the
potential adverse volatility in
this value. It can be thought
of as the worst financial loss
that could occur in a year over
the next 20 years.
UNINTERTUPTIBLE POWER SUPPLY
(UPS): A backup supply that provides
continuous power to critical equipment
in the event that commercial power
is lost. UPLOADING: Connecting
to another computer and sending
a copy of program or file to that
computer. SEE ALSO Downloading.
USEFUL RECORDS : Records that
are helpful but not required on
a daily basis for continued operations.
USER CONTINGENCY PROCEDURES
: Manual procedures to be implemented
during a computer system outage.
|
|
|
|
| |
VALIDATION SCRIPT: A set of procedures
within the Business Continuity
Plan to validate the proper function
of a system or process before
returning it to production operation.
VITAL RECORD: A record that must
be preserved and available for
retrieval if needed.
VOICE RECOVERY : The restoration
of an organization's voice communications
system.
|
|
|
|
| |
WARM SITE: An alternate processing
site which is equipped with some
hardware, and communications interfaces,
electrical and environmental conditioning
which is only capable of providing
backup after additional provisioning,
software or customization is performed.
WORKAROUND PROCEDURES: Interim
procedures that may be used by
a business unit to enable it to
continue to perform its critical
functions during temporary unavailability
of specific application systems,
electronic or hard copy data,
voice or data communication systems,
specialized equipment, office
facilities, personnel, or external
services. SIMILAR TERMS: Interim
Contingencies.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
|
| |
|
|
|
|