Pre-Incident Planning
Pre-Incident planning is a critical and often overlooked phase in business continuity that can prevent or decrease the impact of an incident. The Business Continuity Office oversees university-wide pre-incident planning. Pre-incident planning has the following components:
- Risk Assessment: Identification and assessment of risks based on their probability and impact. High priority risks may potentially be transferred or mitigated through a variety of risk management strategies.
- Business Impact Assessment: Quantification of the impact of a disruption to a process. By understanding the relative value of processes, it identifies those processes for which business continuity and technical disaster recovery plans are most essential.
- Emergency Response Plan: A plan that includes procedures to be followed during an emergency including: reporting an event, responding to particular hazards, evacuation or shelter in place, changes in operational status.
- Business Recovery Plan: A plan for how an organization will resume partially or completely interrupted critical processes within a predetermined time after a disaster or disruption.
- Disaster Recovery Plan: A plan for how an organization will recover data, hardware and software partially or completely interrupted critical processes within a predetermined time after a disaster or disruption.