Certificate in IT Disaster Recovery Planning (CITDRP)

Course overview

Course outline

1. 1Day 1: IT infrastructure

   • The issue of resilience
   • ISO 27031 Relationship with Information Security Management System (ISMS)
   • Data center and IT infrastructure
   • Operational sustainability
   • Data center site infrastructure tier standard
   • Elements of operational sustainability
   • Infrastructure strategy and policy
   • The strategy – how and it's depth
   • The policy requirements
   • Site and building protection
   • Network and information systems protection
2. 2Day 2: Risk evaluation and Business Impact Analysis (BIA)

   • Site and building risk assessment
   • PESTLE analysis (Political, Economic, Sociological, Technological, Legal, Environmental)
   • Types of BIA; strategic, tactical and operational
   • Implementation methods for technology BIA
3. 3Day 3: Managing recovery plans & Understanding IT Disaster Recovery (DR) and reviewing the main activities

   • Managing recovery plans
   • Processes and procedures for supply chain management using a 3PQ (Third Party Questionnaire) approach, aligned with BSI PAS 7000
   • On and off-site data and information storage, including emergency response arrangements
   • Change management processes and procedures for day-to-day requirements
   • Risk control measures for critical supporting equipment and systems
   • Understanding IT Disaster Recovery (DR) and reviewing the main activities
   • DR lifecycle, including resources and training
   • IT DR as part of the ISMS
   • Scope of IT elements and requirements
4. 4Day 4: IT disaster recovery plans

   • Building technology recovery plans
   • Plan ownership and structure, and roles and responsibilities of IT DR Team
   • Data and information sources, and internal and external dependencies
   • Best practice considerations using ISO 27301, as well as ISO 20000 and ITIL
   • Managing and recovering end-user computing and communications technology and infrastructure
   • Recovery options
   • Developing, implementing and testing
   • Ownership and plan structure
   • Roles and responsibilities of BC Champion and Team Leaders
   • Command, Coordination, Communications and Intelligence (C3i)
   • Role of the command center and essentials
   • Equipment and supporting information
   • Producing Situation Reports (SITREPS)
   • Types of testing/exercising
   • Major incident response
   • Defining an “incident” and the escalation process
   • Establishing Command, Coordination and Communications (3C)
   • Clarifying the role of the Network Operations Centre (NOC)
   • Emergency response and plan invocation
   • Consideration of the supporting information, equipment and systems required
   • Production of Situation Reports (SITREPS), activity logging and tools
   • Post incident review
   • Learning from incidents
   • The value of post-incident review
   • Post-incident process
5. 5Day 5: Audit and maintenance

   • What is the function of an IT audit?
   • Steering Committee and Terms of Reference (ToR’s)
   • Overriding management review and continuous improvement
   • Incorporating DR into the organization lifecycle processes and establishing virtual teams
   • DR documentation and working with internal and external audit functions