Training BCM - IT BCP & Disaster Recovery Plan (DRP)

Training Syllabus: BCM - IT BCP & Disaster Recovery Plan (DRP)

I. General Information

• Course: BCM - IT BCP & Disaster Recovery Plan (DRP)
• Duration: 3 days (6 hours per day)
• Total Hours: 18 hours
• Trainer :

Hery Purnama, SE.,MM. MCP, PMP, ITILF, CISA, CISM, CRISC, CDPSE, CGEIT, COBIT, TOGAF, CDMP, CTFL, CBAP, CISSP

II. Training Description

This training program focuses on the critical aspects of Business Continuity Management (BCM) with a specific emphasis on IT Business Continuity Planning (BCP) and Disaster Recovery Plans (DRP). Participants will gain comprehensive knowledge of BCM principles, risk assessment, BIA, development of BCP and DRP strategies, testing methodologies, and continuous improvement practices.

III. Training Objectives

Upon completion of this training, participants will be able to:

1. Understand the foundational concepts and principles of Business Continuity Management (BCM).
2. Identify and assess IT risks that may impact business continuity.
3. Develop effective IT Business Continuity Plans (BCP) based on risk assessment and Business Impact Analysis (BIA).
4. Formulate and implement Disaster Recovery Plans (DRP) for IT systems.
5. Apply testing and exercising methods to validate the effectiveness of IT BCP and DRP.
6. Evaluate BCM strategies and plans for continuous improvement.

IV. Prerequisites

Participants are expected to have a basic understanding of IT systems and business operations. Familiarity with risk management concepts is beneficial but not mandatory.

V. Target Participants Role

This training is suitable for individuals in the following roles:

• IT Managers and Professionals
• Business Continuity Managers
• Risk Management Professionals
• System Administrators
• Security Analysts
• Project Managers involved in IT initiatives
• Anyone responsible for ensuring IT systems' availability and resilience in the face of disruptions.

VI. Course Outline

Day 1: Introduction to BCM and IT Risk Assessment

Session 1: Overview of BCM

• Definition and Importance of Business Continuity Management
• Key Components and Objectives of BCM
• Case Studies on Business Failures and Their IT Impact

Session 2: IT Risk Identification

• Identifying Common IT Risks
• Methods for IT Risk Identification
• Notable IT Failure Case Studies
• Regulatory Compliance and IT Risk

Session 3: IT Risk Analysis and Evaluation

• Quantitative and Qualitative Risk Analysis
• Risk Evaluation Techniques
• Prioritizing IT Risks
• Risk Mitigation Strategies

Session 4: Group Exercise - Risk Assessment for a Sample IT System

• Hands-on practice in assessing and evaluating IT risks
• Group discussion and analysis of risk assessment results

Day 2: Business Impact Analysis (BIA) and IT Business Continuity Planning

Session 5: Business Impact Analysis (BIA) for IT Systems

• Purpose and Process of BIA
• Identifying Critical IT Functions
• Dependencies and Interconnections
• BIA Case Studies

Session 6: Developing IT BCP Strategies

• IT BCP Strategies and Solutions
• Resource Allocation for IT BCP
• Successful IT BCP Implementation Case Studies
• Regulatory Compliance in BCP

Session 7: Creating IT BCP Documentation

• Components of IT BCP Documentation
• Documenting IT Recovery Procedures
• Document Maintenance and Updates
• Communication Plans in BCP

Session 8: Group Workshop - Creating a Draft IT BCP for a Hypothetical Scenario

• Collaborative drafting of an IT BCP based on a provided scenario
• Peer review and feedback on drafted IT BCPs

Day 3: Disaster Recovery Planning, Testing, and Continuous Improvement

Session 9: Introduction to Disaster Recovery Planning (DRP)

• Defining DRP for IT Systems
• Key Components of a DRP
• IT Infrastructure Recovery Strategies
• Aligning DRP with IT BCP

Session 10: Developing DRP for IT Systems

• Steps in Developing a DRP
• IT Service Recovery Planning
• DRP Implementation Case Studies
• Legal and Ethical Considerations in DRP

Session 11: Testing IT BCP and DRP

• Importance of Testing and Exercising
• Types of Tests for IT BCP and DRP
• Conducting Tabletop Exercises
• Simulations and Full-Scale Tests

Session 12: Evaluation and Continuous Improvement

• Evaluating BCM Effectiveness
• Metrics and Key Performance Indicators (KPIs) for BCM
• Lessons Learned and Continuous Improvement in BCM
• Updating and Enhancing BCP and DRP

Session 13: Case Study Analysis - Real-world Examples of Successful BCP and DRP Implementation

• In-depth analysis of real-world cases of successful BCM implementation
• Group discussions on key takeaways and best practices

Session 14: Final Project Presentations and Discussion

• Groups present their IT BCP and DRP projects
• Q&A and Feedback
• Reflection on the training and future considerations in BCM

VII. Assessment

• Class Participation: 10%
• Assignments and Group Exercises: 30%
• Midterm Exam: 20%
• Final Project Presentation: 40%

VIII. References

• D. Elliott, "Business Continuity Planning: A Step-by-Step Guide," 2nd Ed.
• P. B. Hiles, "The Definitive Handbook of Business Continuity Management," 3rd Ed.
• ISACA, "COBIT 2019 Framework"

IX. Grading Scale

• A: 90-100
• B: 80-89
• C: 70-79
• D: 60-69
• F: Below 60

Note: This syllabus is subject to modification based on class needs and progress