IT infrastructure
The issue of resilience
ISO 27031 Relationship with Information Security Management System (ISMS)
Data center and IT infrastructure
Operational sustainability
Data center site infrastructure tier standard
Elements of operational sustainability
Infrastructure strategy and policy
The strategy – how and it's depth
The policy requirements
Site and building protection
Network and information systems protection
Risk evaluation and Business Impact Analysis (BIA)
Site and building risk assessment
PESTLE analysis (Political, Economic, Sociological, Technological, Legal, Environmental)
Types of BIA; strategic, tactical and operational
Implementation methods for technology BIA
Managing recovery plans
Processes and procedures for supply chain management using a 3PQ (Third Party Questionnaire) approach, aligned with BSI PAS 7000
On and off-site data and information storage, including emergency response arrangements
Change management processes and procedures for day-to-day requirements
Risk control measures for critical supporting equipment and systems
Understanding IT Disaster Recovery (DR) and reviewing the main activities
DR lifecycle, including resources and training
IT DR as part of the ISMS
Scope of IT elements and requirements
IT disaster recovery plans
Building technology recovery plans
Plan ownership and structure, and roles and responsibilities of IT DR Team
Data and information sources, and internal and external dependencies
Best practice considerations using ISO 27301, as well as ISO 20000 and ITIL
Managing and recovering end-user computing and communications technology and infrastructure
Recovery options
Developing, implementing and testing
Ownership and plan structure
Roles and responsibilities of BC Champion and Team Leaders
Command, Coordination, Communications and Intelligence (C3i)
Role of the command center and essentials
Equipment and supporting information
Producing Situation Reports (SITREPS)
Types of testing/exercising
Major incident response
Defining an “incident” and the escalation process
Establishing Command, Coordination and Communications (3C)
Clarifying the role of the Network Operations Centre (NOC)
Emergency response and plan invocation
Consideration of the supporting information, equipment and systems required
Production of Situation Reports (SITREPS), activity logging and tools
Post incident review
Learning from incidents
The value of post-incident review
Post-incident process
Audit and maintenance
What is the function of an IT audit?
Steering Committee and Terms of Reference (ToR’s)
Overriding management review and continuous improvement
Incorporating DR into the organization lifecycle processes and establishing virtual teams
DR documentation and working with internal and external audit functions
