BCP vs DRP
"John Fitzgerald" <[email protected]> Wed, 18 Sep 2002 16:46:38 +0100
| Newsgroups | gmane.comp.security.cissp |
|---|---|
| Message-ID | <009301c25f2a$939cb0e0$148da8c0@khan> |
Business Continuity Planning vs Disaster Recovery Planning Has anyone come across (or derived) a good definition that underlines the difference between these two disciplines? Any references that I've come across seem to fudge the issue.it's a bit woolly in my head as well. Ignoring any of the CISSP references, if someone had asked me what BCP was I'd have described it as the following: The process of planning to mitigate incidents which threaten the continued operation of the business - Equipment failure, Power Failure, Security Incidents, Staff Turnover etc. But this definition can be extended to Disaster Recovery (it's just that the incidents may be more severe - Fire, Flood, War etc)..so how do I differentiate the two? Is it just that BCP attempts to assure the continued 'smooth running' of a business in the face of minor crises while DRP is in place to assure the 'viability' of a business in the event of a major crisis. In practice this is the way I have always approached BCP and DRP but it will be useful to know what the CISSP is supposed to quote Any comments welcomed