Page 1282 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

7.13.3 Simulation

7.13.4 Parallel

7.13.5 Full interruption

In Chapter 3, “Business Continuity Planning,” you
learned the essential elements of business continuity planning (BCP)—
the art of helping your organization assess priorities and design
resilient processes that will allow continued operations in the event of

a disaster.

Disaster recovery planning (DRP) is the technical complement to the
business-focused BCP exercise. It includes the technical controls that
prevent disruptions and facilitate the restoration of service as quickly
as possible after a disruption occurs.

Together, the disaster recovery and business continuity plans kick in
and guide the actions of emergency-response personnel until the end
goal is reached—which is to see the business restored to full operating

capacity in its primary operations facilities.

While reading this chapter, you may notice many areas of overlap
between the BCP and DRP processes. Our discussion of specific
disasters provides information on how to handle them from both BCP
2
and DRP points of view. Although the (ISC) CISSP curriculum draws
a distinction between these two areas, most organizations simply have
a single team and plan to address both business continuity and
disaster recovery concerns. In many organizations, the single
discipline known as business continuity management (BCM)
encompasses BCP, DRP, and crisis management under a single

umbrella.