NAVARRO,LLERA H.

BSAIS 4-YA-1

MIDTERM ASSIGNMENT ISOM

11. What is contingency planning? How is it different from routine management? Planning? What are
the components of contingency planning?
Senior management will outline the organization's activities and actions if an unfavorable event
develops Into an incident or disaster through the process of contingency planning (CP). This planning
involves preliminary business impact analysis as well as initiatives for incident response, catastrophe
recovery, and Business continuity. While, routine management planning only considers business as usual
unlike Contingency planning (CP) which considers inevitable incidents.
12. When is the IR plan used?
- Incident response (IR) plan are the actions an organization can and should take while an incident is in
Progress. The IR plan also enables the organization to take coordinated action that is either predefined
and specific or ad hoc and reactive. In conclusion, IR plan is immediately used after an incident, but if the
attack escalates or is disastrous (fire, flood, earthquake) the process moves on to the disaster recovery,
and the Business Continuity plan
13. When is the DR plan used?
The DR plan provides detailed guidance in the event of a disaster. It is organized by the type or nature of
the disaster, and it specifies recovery procedure during and after each type of disaster. DR plan is used if
the IR plan is insufficient, or if the incident begins as a disaster such as fire, flood, and/or blackout.
14. When is the BC plan used? How do you determine when to use the IR, DR, and BC plans?
The Business Continuity plan is used concurrently with the DR plan and when the damage is major or
ongoing, and requires more than simple restoration of information resources. The BC plan establishes
critical business functions at an alternate site. To determine what contingency planning to use, when an
adverse event happens, when the incident is detected the IR plan is automatically activated. But when
the incident turns into a disaster or even at the start it is detected to be disastrous event, the disaster
reaction DR plan is activated which focuses to restore the operation at the primary site. At worst, if the
disaster is identified that DR plan is not enough, it triggers to continuity response of BC plan. Unlike DR
plan, BC plans focuses on the restoration of operations to be established at alternative site.
15. What are the elements of a business impact analysis?
Elements of Business Impact Analysis (BIA)
 Scope: To choose which business units to include in the BIA, which systems to include, and the
type of risk being assessed, it is important to carefully explore the components of the company
that will be included.
 Plan: Know what is more important data and make sure that the information gathered are all
true and free from error. Data/information should address the needs of decision makers.
 Balance: Facts should be identified against opinion, but it should not be completely disregarded
knowingly that there are times that knowledge and experience of key personnel can be
invaluable.
 Know the objectives/ Device: Identify in advance what the key decision makers require for
making choices. Structure the BIA so the information they need facilitates consideration of those
choices.
 Follow-ups: Get updates regularly to ensure that the BIA is functioning as intended and helpful
to the decision makers.