Business Continuity
This plan helps a company keep working even if something unexpected happens.
What is a Business Continuity Plan (BCP)?
This plan is used for response after a Significant Business Disruption (SBD) to recover Infrastructure, Applications, Services, and Data necessary to the operation of CNA.
What is an Application Disaster Recovery Plan?
Working together, these two teams help CNA recover during a significant business disruption.
Who are Business Continuity and Disaster Recovery teams?
This kind of test is like a meeting where people talk through the steps they would follow and implement during a significant business disruption.
What is a tabletop exercise?
This is the most important thing to protect and recover after a disaster because businesses can’t continue without it.
What is data?
Before creating a business continuity plan, organizations perform this assessment to identify critical processes and their impact if disrupted.
What is a Business Impact Analysis (BIA)?
Per our Disaster Recovery Plan Standard, Disaster Recovery Plans must be reviewed, validated, and approved on this cadence.
What is “at least once each year"?
This department partners with Business Continuity and Disaster Recovery teams to ensure proper controls.
Who is the Technology Risk and Control Team?
In this test, companies restore their systems from backups.
What is a recovery test?
Encrypting data ensures this key security principle.
What is confidentiality?
Per our policy, Business Continuity Plans must be reviewed, validated, and approved on this cadence.
What is “at least once each calendar year”?
The workflow used to complete Application Disaster Recovery Plan Reviews.
What is Guided Workflow (GWF)?
This is CNAs Disaster Recovery as a Service (DRaaS) partner.
Who is RecoveryPoint Systems (RPS)?
This test checks if everyone can get important messages during an emergency.
What is a notification test?
This type of backup captures only changes since the last backup.
What is an incremental backup?
BC plans must be documented in this specific system.
What is the Enterprise Planning tool?
The central storage repository for recovery documentation for Application Disaster Recovery Plans.
What is the ServiceNow Knowledge Base?
This agreement outlines services, responsibilities, and performance metrics between CNA, TPAs, Vendors and MSPs.
What is a Service Level Agreement (SLA)?
This type of test checks a whole process from start to finish to make sure everything works together the way it should.
What is end-to-end testing?
This term means saving copies of information in more than one place, so it’s not lost if something goes wrong.
What is replication?
Within a BC plan, this section defines the specific approaches for restoring each critical process after a disruption.
What are Recovery Strategies?
Written instructions that show how to recover and bring systems and data back after a disaster.
What is recovery documentation or recovery procedures?
This team partners with the Business Continuity and Disaster Recovery team to feed application data into the enterprise planning system (Fusion Risk Management).
Who is the ServiceNow Team?
After any test, CNA writes down what went well and what could be better.
What are lessons learned or After Action?
This metric defines acceptable data loss in time.
What is Recovery Point Objective (RPO)?