Explain The Key Steps In Designing Incident Response Strategy

Business Continuity (BC) Strategies

Identifying the organization’s risk treatment strategy will determine which products and services require a BC strategy to ensure the continuity of prioritized activities. The aim of designing continuity and recovery strategies is to set time frame for recovery and identify the means by which those objectives will be achieved.

8.3.1 Points to consider when determining BC Strategies

To ensure success, the BC strategies shall determine:

• The party which is responsible for achieving the recovery goals

• Means and resources to be used to achieve the goals

• The timeframe set for achieving the goals

• Determining the best strategies which ensure many factors are taken into consideration. of these:

1. Results

• Evaluation of the nature and degree of a disruptive incident or the potential impact;

• Introduce appropriate measures for the welfare to affected individuals;

8.4.2 Key steps on designing Incident Response Plan

The key steps in designing the incident response plan are:

• Identifying the organization’s existing management structure, nature, scale, complexity, process infrastructure and activity recovery requirements;

• Identifying the people and teams responsible for using any existing emergency response, crisis management or incident management plans;

• Developing a draft incident response structure;

• Reviewing the draft incident response structure;

• Preparing a recommended incident response structure for Top Management;

• Obtaining Top Management approval for the incident response structure; and

• Documenting and publishing the approved incident response structure.

8.4.3

Temporary use of any element in performing main/essential activities

• Record of the internal and external stakeholders that may need to be contacted in the first few hours of an emergency, crisis and disaster;

• The means of communication with stakeholders, local authorities, and media and what is required to be communicated to them;

• Pre-scripted message templates for communications;

• Personnel responsible for coordinating with first responders; and

• Process and criterion used to assess damage and impact.

8.5 Business Continuity Plan (BCP)

The effectiveness of an organization’s Business Continuity capability is dependent on its ability to plan for activity at each stage of the disruption. The organization shall effectively respond to the incident to ensure the health and safety of its personnel, those responding to the incident and those impacted by the emergency, crisis or disaster.

8.5.1 The key steps in developing a plan include

• Appoint an owner/ sponsor for the plan

• Make a decision about the structure, format components and contents

• Precisely define the objectives and scope

• Assign the roles and responsibilities of the response team

• Collect the information necessary to populate the