2. Conduct the business impact
analysis (BIA). The BIA helps to identify and prioritize critical IT systems
and components.
3. Identify preventive controls.
Measures taken to reduce the effects of system disruptions can increase
system availability and reduce contingency life cycle costs.
4. Develop recovery strategies.
Thorough recovery strategies ensure that the system may be recovered quickly
and effectively following a disruption.
5. Develop an IT contingency plan.
The contingency plan should contain detailed guidance and procedures for
dealing with a variety of adverse circumstances.
6. Plan testing, training, and
exercises. Testing the plan identifies planning gaps, whereas training
prepares recovery personnel for plan activation; both activities improve
plan effectiveness and overall agency preparedness.
7. Plan maintenance. The plan
should be a living document that is updated regularly to remain current with
system enhancements.