Certification and validation of Business Continuity

What is Business Continuity?

Business can continue to operate and do normal activity through a disaster, event or incident

Who decides if an organization is back to normal?

Usually decided by policy, driven by the BCP or DR team

IR team may serve as only support in the continuity effort

BCP/DR may serve as support for IR team in the same

• Depends on incident specifics

Evaluation/validation period

Define time frame for how long validation and monitoring will be

How long will we look for abnormal behavior before moving on to follow-up

Begin preparations for follow-up

Part of recovery should be to begin data preparations and findings preparation for follow-up

Another recovery goal is to make sure infections don't recur from previous infections