Course Objectives

This course focuses on two aspects of Cyber Security: analysis and assessment of risk plus how to minimize it, and, how to extract and use digital information from a wide range of systems and devices. The course is structured so that all students cover the same introductory material, but then choose to specialize in either Cyber Security or Digital Forensics. Any aforesaid science graduate who requires keen interest & knowledge of IT programming languages with basic knowledge of math beyond calculus.

Course Outcomes

• SNO	DESCRIPTION	PO MAPPING
  CO1	Understand the recover operations more quickly after interruptions	PO1, PO2, PO5, PO6, PO11, PO12
  CO2	Understand to reduce costs and duration of any disruption.	PO1, PO2, PO4, PO5, PO11
  CO3	mitigate risks and financial exposure. build customer confidence and trust	PO1,PO2, PO5, PO6, PO7

Course Syllabus

MSCS2103-BUSINESS CONTINUITY PLANNING (BCP) AND DISASTER RECOVERY (DR)

MODULE (I):                                                                                                                       

Introduction -Introduction to Business Continuity Management (BCM) and Disaster Recovery (DR) -Terms and definitions - BCM principles - BCM life cycle - (BCM program management, Understanding the organization - Determining business continuity strategy, Developing and implementing a BCM response, BCM exercising, Maintaining and reviewing BCM arrangements, Embedding BCM in the organization’s culture)- BCM in business: Benefits and consequence - Contemporary landscape: Trends and directions.

MODULE (II):                                                                                                                     

Business Impact Analysis -BCM and DR–The relationship with Risk Management - Risk Management concepts and framework - Concepts of threat, vulnerabilities and hazard - Risk Management process - Risk assessment, risk control options analysis, risk control implementation, risk control decision, and risk reporting -Business Impact Analysis (BIA) concept, benefits and responsibilities - BIA methodology - Assessment of financial and operational impacts, identification of critical IT systems and applications, identifications of recovery requirements and BIA reporting - Relationship between BIA and Risk Management.

MODULE (III):                                                                                                                    

Business Continuity Strategy and Business Continuity Plan (BCP) Development -Business continuity strategy development framework - Cost-benefit assessment - Site assessment and selection - Selection of recovery options - Strategy considerations and selection - Linking strategy to plan - Coordinating with External Agencies -Business continuity plan contents - Information Systems aspects of BCP - Crisis Management - Emergency response plan and crisis communication plan - Awareness, training and communication - Plan activation - Business Continuity Planning Tools.

MODULE (IV):                                                                                                                    

Business Continuity Plan Testing and Maintenance -Test plan framework - Types of testing – Business Continuity Plan Testing - Plan maintenance requirements and parameters - Change management and control -Business Continuity Plan Audits. Disaster Recovery – Definitions - Backup and recovery - Threat and risk assessment - Site assessment and selection - Disaster Recovery Road map - Disaster Recovery Plan (DRP)preparation - Vendor selection and implementation - Difference between BCP and DRP - Systems and communication security during recovery and repair.

TEXT BOOK:

• Business Continuity Planning: A Step-by-Step Guide with Planning Forms on CD-ROM by Kenneth L. Flumer, 3rd edition, Rothstein Associates Publication, 04 Oct 2004.
• A Risk Management Approach to Business Continuity: Aligning Business Continuity with Corporate Governance by Julia Graham, David Kaye and Philip Jan Rothstein, Illustrated edition, Rothstein Associates Publication, 31 Jan2006.

Session Plan

Session 1

Introduction to Business Continuity Management (BCM) and Disaster Recovery (DR) -Terms and definitions:

BCP-1

Session 2

Terms and definitions - BCM principles - BCM life  cycle:

BCP-2

Session 3

Understanding the organization - Determining business continuity strategy:

BUSINESS CONTINUITY STRATEGY

Session 4

Developing and implementing a BCM response:

BCM RESPONSE

Session 5

BCM exercising, Maintaining and reviewing BCM arrangements:

BCM ARRANGEMENT

Session 6

Embedding e:BCM in the organization’s culture

bcmculture

Session 7

BCM in business: Benefits and consequence:

BCM BENEFITS

Session 8

Contemporary landscape: Trends and directions:

CONTEMPORARY TREND

Session 9

Business Impact Analysis -BCM and DR–The relationship with Risk Management:

Business Impact Analysis

Session 10

The relationship with Risk Management - Risk Management concepts and framework:

risk management framework

Session 11

Concepts of threat, vulnerabilities and hazard:

What is vulnerability and threat

Session 12

Risk Management process - Risk assessment, risk control options analysis:

risk control options analysis

Session 13

Risk control implementation, risk control decision, and risk reporting -Business Impact Analysis (BIA):

Risk control implementation

Session 14

BIA benefits and responsibilities - BIA methodology:

BIA methodology

Session 15

Assessment of financial and operational impacts, identification of critical IT systems and applications:

Assessing-the-Financial-Impact-of-Downtime-UK

Session 16

Identifications of recovery requirements and BIA reporting:

BIA reporting

Session 17

Relationship between BIA and Risk Management:

Enhancing Business Impact Analysis 

Session 18

Business continuity strategy development framework:

Business continuity strategy development framework

Session 19

Cost-benefit assessment - Site assessment and selection:

Cost

Session 20

Selection of recovery options - Strategy considerations and selection:

Selection of recovery options

Session 21

Linking strategy to plan - Coordinating with External Agencies:

Linking strategy to plan

Session 22

Business continuity plan contents - Information Systems aspects of BCP:

Business continuity plan contents

Session 23

Crisis Management - Emergency response plan and crisis communication plan:

CRISIS MANAGEMENT

Session 24

Awareness, training and communication:

Awareness

Session 25

Plan activation - Business Continuity Planning Tools:

BUSINESS CONTINUITY PLANNING TOOLS

Session 26

Business Continuity Plan Testing and Maintenance -Test plan framework:

Business Continuity Plan Testing and Maintenance

Session 27

Types of testing – Business Continuity Plan Testing:

Types of testing

Session 28

Plan maintenance requirements and parameters:

Plan maintenance requirements and parameters

Session 29

Change management and control -Business Continuity Plan Audits:

Change management and control

Session 30

Disaster Recovery – Definitions - Backup and recovery:

Disaster Recovery

Session 31

Threat and risk assessment 

Threat and risk assessment in details

Session 32

Site assessment and selection

Site assessment and selection

Session 33

Disaster Recovery Road map

Disaster Recovery Road map

Session 34

Disaster Recovery Plan (DRP) preparation:

Disaster Recovery Plan

Session 35

Vendor selection 

Vendor selection

Session 36

Vendor selection and implementation 

Vendor selection and implementation

Session 37

Difference between BCP and DRP :

Difference between BCP and DRP

Session 38

 Systems and communication security 

Systems and communication security

Session 39

 Systems and communication security during recovery 

Systems and communication security during recovery

Session 40

 Systems and communication security during  repair:

Systems and communication security during