Exercising Business Continuity or Disaster Recovery Plans

D

deephsd

#1
I wanted to get an opinion from the forum on what qualifies as a business continuity test exercise. We are into providing mortgage services at St. Paul, MN have relocated one of our offices within the same city over the weekend. I'm part of the organization's BCP and compliance team and we are debating internally whether we can showcase the relocation as a DR test since we have not conducted one for some time now. Your opinions will be extremely helpful.

Thanks & Regards
 
Elsmar Forum Sponsor

Jen Kirley

Quality and Auditing Expert
Leader
Admin
#2
Re: Question on Exercising Business Continuity or Disaster Recovery Plans

Good day Deephsd,

In order to perform as a test of continuity exercise, I would expect the relocation was performed in the same sort of manner as would be carried out in a manner in which it would for the purpose of maintaining continuity. That is: accessing, transporting and setting up the equipment and materials as you would in a situation where continuity called for the actions. Plans can, and should be made ahead of time to shorten the time and funds needed to set up this contingency site. Those plans should be the ones used for this site setup in order to accurately call it a drill.
 
D

deephsd

#3
Re: Question on Exercising Business Continuity or Disaster Recovery Plans

Yes that's right. We have planned all the phases of the move like the transport, setting up of equipment's, Identifying roles, communication plan to the stake holders etc.

We were not sure if this can be showcased as a test exercise.

Thanks,
Deepak
 
#4
Re: Question on Exercising Business Continuity or Disaster Recovery Plans

Did you perform any internal audits while it was being performed? It's one thing to have a plan and to *think* the plan was being implemented in this (great opportunity) to test the plan, but it occurs to me that an internal audit could have also been performed at the same time to determine if the plan was being followed. Also, once the move was completed, the results, compared to the plan, plus the audit results could be offered up as discussion under management review.

Were those things done?
 

Richard Regalado

Trusted Information Resource
#5
Re: Question on Exercising Business Continuity or Disaster Recovery Plans

I second Jennifer's reply.

To add to that a BCP test should have established objectives. Based from experience, objectives should be taken from the BCP that is to be tested. In your case, the BCP for the relocation to another site. Possible objectives would be measuring if the drill meets the RTO, MAO, resource requirements, budget, etc.

I would not do an internal audit (Cl 9.2 of ISO 22301) while you are doing the BCP testing. But, I would be nominating independent observers to provide useful feedback during the post-test briefing.

Now, to not put what you did to waste, you can do a post-test briefing and highlight what you need to have for the next test to make it more comprehensive and encompassing.

Regards,
Richard
 
D

deephsd

#6
We did not do an internal audit, but we are assessing the planned activities against the Actual carried out activities to ensure we have met our RTO requirements.

Thanks,
Deepak
 
Thread starter Similar threads Forum Replies Date
V Going out of business - related obligation to transferring to another manufacturer EU Medical Device Regulations 0
T Supplier Evaluation - *ALL* Suppliers to business? ISO 13485:2016 - Medical Device Quality Management Systems 5
M Need to set up a "crisis management and business continuity plan" AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 1
R Starting an automotive containment business Service Industry Specific Topics 3
H Mapping QMS+business processes in a medical device with class I and IIa+b Process Maps, Process Mapping and Turtle Diagrams 3
Sidney Vianna A young Steve Jobs take on Quality, Marketing & Business Processes. Coffee Break and Water Cooler Discussions 0
A How to monitor new versions of external standards in your business Various Other Specifications, Standards, and related Requirements 2
M ISO 13485 Clause 7.3.8 ---- on Business Transfer ISO 13485:2016 - Medical Device Quality Management Systems 2
L Did anyone hear business registration ontario? General Information Resources 1
I Foreign manufacturer registered place of business in EU for CE certification EU Medical Device Regulations 1
M How to manage Sop's & other quality documents after business transfer Document Control Systems, Procedures, Forms and Templates 3
D QMS Realignment after business splits into 2 different companies AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
E Business Continuity Plan Exercise for Outsourced Services Business Continuity & Resiliency Planning (BCRP) 7
G Microsoft Office 365 Business plan questions Business Continuity & Resiliency Planning (BCRP) 10
S Business Number versus Company ID? Canada Medical Device Regulations 3
K Business Process Flowchart Process Maps, Process Mapping and Turtle Diagrams 2
Sidney Vianna Informational ESG - Environment, Social & Governance issues gaining ground in the Business World Sustainability, Green Initiatives and Ecology 22
N ISO 9001 - Training business with fewer than 5 employees ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
qualprod Business Continuity Planning in ISO 9001? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
S ISO 9001 implementation in a Gold exporting business ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
E BCP (Business Continuity Plan) Call Tree Business Continuity & Resiliency Planning (BCRP) 14
H Expanding our business and the implications to our QMS Manufacturing and Related Processes 2
Richard Regalado Top 10 operational risks of 2019 for business continuity planning Business Continuity & Resiliency Planning (BCRP) 6
M ISO 9001:2015 8.2.1 Contingency Plan required for small Business? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
Nicole Desouza ISO / AS Certification - Small business with less than 100 employees ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
R Supplier evaluation and business needs in the context of ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 2
M Informational Australia – TGA business plan 2019-20 Medical Device and FDA Regulations and Standards News 0
M SOP Sample for BC/ISO22301 (Business Continuity) wanted Business Continuity & Resiliency Planning (BCRP) 4
M BCM (Business Continuity) and BPM in a company with an IT System Business Continuity & Resiliency Planning (BCRP) 0
A Brazil: Termination of business relations with BRH – what happens to registrations? Other Medical Device Regulations World-Wide 1
Jen Kirley Conway Business Services LLC - Jen Kirley ISO 14001:2015 Specific Discussions 0
J Business Intelligence and 21 CFR Part 11 Compliance Qualification and Validation (including 21 CFR Part 11) 1
G Anyone working with or planning to do business in the CBD (cannabidiol) industry? US Food and Drug Administration (FDA) 1
M Supplier Management outsourcing - Business idea Supplier Quality Assurance and other Supplier Issues 8
T AS9100 Maintain Approval When Business Ownership Changes AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 8
WCHorn US Citizen Traveling to Mumbai for Business Travel - Hotels, Motels, Planes and Trains 4
S New to the automotive business and VDA VDA Standards - Germany's Automotive Standards 5
R Process Mapping for a BPMS (Business Process Management System) vs ISO Process Maps, Process Mapping and Turtle Diagrams 1
F BREXIT - What/How are You and Your Business Preparing for It? EU Medical Device Regulations 20
P Suggestion for QMS platform solution + Business process automation Software Quality Assurance 3
A Should we do business in the automotive sector? IATF 16949 - Automotive Quality Systems Standard 7
F Business expanding - Campus vs Multi Site Certification Structure AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
P Definition Business Type - Definition of what we do-Business Type Definitions, Acronyms, Abbreviations and Interpretations Listed Alphabetically 4
A What does a good business practice Process Audit look like for AS9100D? Process Audits and Layered Process Audits 9
S Internal Audits performed by another local business ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 26
R Business Benefits from IATF 16949 QMS IATF 16949 - Automotive Quality Systems Standard 4
S Business development and support - Getting business general liability insurance Career and Occupation Discussions 5
J Business Impact Analysis SOP Business Continuity & Resiliency Planning (BCRP) 2
B Seeking for an example or a template of a Business Plan Service Industry Specific Topics 3
Q Is ISO 9001 fully enough to manage a business? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 19

Similar threads

Top Bottom