Certificate in Information Technology Disaster Recovery Planning

Certificate in Information Technology Disaster Recovery Planning

Methodology:

This course is highly interactive and includes group discussions, video presentations, case studies, and exercises. Risk assessment methods, BIA, and DR models for high-tech planning are applied during and after the course. Supporting information is provided, such as Terms of Reference (TOR) guidelines, change management, DR testing strategies, and auditing processes. The course also includes specific models for implementing a Business Impact Analysis (BIA) and completing an Information Technology Disaster Recovery Plan (DRP) as applied by participants in their organizations.

Course Objectives:

By the end of the course, participants will be able to:

• Consider policies, objectives, goals, processes, and procedures related to risk management and improving information technology for business continuity (IRBC).
• Apply best practices for building information technology infrastructure and operational sustainability to provide a secure environment.
• Describe the processes and procedures for risk assessment and identifying threats and weaknesses that may affect the organization.
• Review key elements of assets, human resources, change management, and supply chain management related to information technology.
• Discuss key elements of Information Technology Disaster Recovery (DR) programs, including data management and essential components for Business Impact Analysis (BIA).
• Estimate the Maximum Tolerable Period of Disruption (MTPD), then determine the relationship with the targeted Recovery Time Objective (RTO) and Recovery Point Objective (RPO).
• Produce high-level programs for Information Technology Disaster Recovery.

Target Audience:

IT managers and professionals, including IT Disaster Recovery (DR) managers or anyone responsible for disaster recovery plans (DRP), business continuity plans (BCP), and IT technology auditing and assurance.

Training Program Content:

• Information Technology Infrastructure
• Resilience Case
• ISO 27031 Relationship with Information Security Management System (ISMS)
• Data Centers and Information Technology Infrastructure
• Operational Sustainability
• Data Center Site Infrastructure Standard
• Operational Sustainability Elements
• Infrastructure Policy and Strategy
• Strategy – How and Depth
• Policy Requirements
• Site and Facility Protection
• Network and Information System Protection
• Risk Assessment and Business Impact Analysis (BIA)
• Site and Facility Risk Assessment
• PESTEL Analysis (Political, Economic, Social, Technological, Legal, and Environmental)
• Strategic, Tactical, and Operational BIA Types
• BIA Technology Implementation Methods
• Business Recovery Plans
• Supply Chain Management Processes and Procedures using the 3PQ approach (Third-Party Questionnaire Method) aligned with BSI PAS 7000
• Internal and External Site Data and Information Storage, including Emergency Response Arrangements
• Operations and Procedures Management for Daily Requirements
• Risk Control Measures to Support Systems and Equipment
• Understanding Information Technology Disaster Recovery (DR) and Reviewing Key Activities
• DR Lifecycle, including Resources and Training
• Information Technology DR as part of an Information Security Management System
• Scope of Information Technology Elements and Requirements
• Information Technology Disaster Recovery Plans
• Building Information Technology Disaster Recovery Plans
• Planning Ownership, Structure, Roles, and Responsibilities for IT DR Team
• Internal and External Data and Information Sources and Dependencies
• Best Practices Considerations using ISO 27301, ISO 20000, and ITIL
• Management and Recovery of End-User Computing, Technological Communications, and Infrastructure
• Recovery Options
• Development, Implementation, and Testing
• Plan Ownership and Structuring
• Roles and Responsibilities of Heads and Team Leaders
• Leadership, Coordination, Communications, and Inquiry (C3i)
• Role of a Command Center and Essentials
• Supporting Equipment and Information
• Status Reporting (SITREPS) Production
• Types of Tests/Practices
• Major Incident Response
• Incident Definition and Escalation Process
• Creating Command