Page 213 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 213
fault tolerance.
In any event, don’t get hung up on the difference between the two.
We’ve yet to see an exam question force anyone to draw a solid line
between the two activities. It’s much more important that you
understand the processes and technologies involved in these two
related disciplines.
You’ll learn more about disaster recovery planning in Chapter 18.
The overall goal of BCP is to provide a quick, calm, and efficient
response in the event of an emergency and to enhance a company’s
ability to recover from a disruptive event promptly. The BCP process
has four main steps.
Project scope and planning
Business impact assessment
Continuity planning
Approval and implementation
The next four sections of this chapter cover each of these phases in
detail. The last portion of this chapter will introduce some of the
critical elements you should consider when compiling documentation
of your organization’s business continuity plan.
The top priority of BCP and DRP is always people. The
primary concern is to get people out of harm’s way; then you can
address IT recovery and restoration issues.
