Key Service Area 07 /

Business Continuity Plan (BCP)
and Disaster Recovery Plan (DRP)

Scope Of Works

The best way to describe and differentiate between Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) scope of works which we offer to our customers both in the public and private sectors can be summarized as follows:

01.

Business Continuity Plan (BCP)

BCP is regarded as business-level survival which encompasses the following scope of works and activities:

  • Propose a BCP in the event that the system becomes unavailable
  • In the event of system failure, business operation to be running as usual with minimal impact
  • The underpinning IT infrastructure to support the business continuity approach
  • The system to be designed to support limits on scheduled downtime
  • Propose a comprehensive Disaster Recovery Plan (DRP) and solution, at different levels of system failure
  • Propose contingency measures to minimize service disruption and no loss of data in the event of disaster
  • Describe the technical architecture (including network continuity) of the solution highlighting features which increase resilience and control the risk of system failure

Conduct an on-site simulation test on the DRP solution before CPC being issued. The test to include system and data restoration, verification, validation etc.

02.

Disaster Recovery Plan (DRP)

DRP is regarded as technical infrastructure recovery which encompasses the following scope of works and activities:

  • Propose a comprehensive DRP and solution, at different levels of system failure.
  • Propose contingency measures to minimise service disruption and no loss of data in the event of disaster
  • Describe the technical architecture (including network continuity) of ICT solution highlighting features which increase resilience and control the risk of system failure
  • Conduct on site simulation tests on the DRP solution before CPC being issued. The test to include system and data restoration, verification, validation etc

Key Deliverables

Our common key deliverables, among others, include but not limited to the following:

Risk Assessment and Business Impact Analysis (BIA)

Disaster Recovery (DR) Technical Architecture

BCP/DRP Frameworks

Training program on emergency response actions

Maintenance schedules for policy updates

Audit-ready documentation for compliance verification